last executing test programs:

1h14m47.114278741s ago: executing program 0 (id=261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32)
r5 = eventfd2(0x2, 0x1) (rerun: 32)
write$eventfd(r5, &(0x7f0000000000)=0xa, 0x8) (async, rerun: 64)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 64)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48) (async)
r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, r7, 0x2800002, 0x4010, 0xffffffffffffffff, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xdec) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}], 0x28}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r7, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
r13 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000013000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x3a0) (async, rerun: 32)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
write$eventfd(r14, &(0x7f00000001c0)=0xffffff7f, 0xff25)

1h14m30.234370061s ago: executing program 0 (id=263):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000140)={0x0, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000)
write$eventfd(r7, &(0x7f0000000000), 0xfffffdef)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(0xffffffffffffffff, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@riscv64_smstateen_csr={0x8030000003020000, &(0x7f0000000000)=0x9})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

1h14m29.355899631s ago: executing program 1 (id=264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161e82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x8) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) (async)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0x0)

1h14m22.090588525s ago: executing program 1 (id=265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) (async)
r1 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
write$eventfd(r3, &(0x7f0000000040)=0x6, 0x64) (async)
ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) (async)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe4000, 0x1})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000002, 0x2013, r5, 0x0)

1h14m20.793464559s ago: executing program 0 (id=266):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1h14m17.107162929s ago: executing program 1 (id=267):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1})
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x806)
r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeab, &(0x7f0000000000)={0xbf4})
r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000052, [0x5, 0x81, 0x9, 0x4, 0x2]}}, @hvc={0x32, 0x40, {0x8400000b, [0x4d5c, 0x800, 0x2, 0xb, 0xfff]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1h14m10.809291687s ago: executing program 0 (id=268):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x800454dd, 0x216)

1h14m8.397944625s ago: executing program 1 (id=269):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40a000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000008000/0x7000)=nil, r5, 0x2000004, 0x13, r2, 0x0)
r6 = eventfd2(0x8, 0x800)
close(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x0, 0x2000004, 0x2011, r6, 0x0)
r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
r11 = eventfd2(0x0, 0x0)
close(r11)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r11, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r12 = eventfd2(0x80008, 0x0)
close(r12)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x380c2, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x4000)=nil, 0x930, 0x2000008, 0x10010, r2, 0x0)
write$eventfd(r11, &(0x7f0000000180)=0xa19, 0x8)

1h14m2.707375589s ago: executing program 0 (id=270):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

1h13m58.770400053s ago: executing program 1 (id=271):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r2, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000040)={0x5}) (async)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)

1h13m49.160033161s ago: executing program 0 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f00000000c0)=0x1})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_REG_LIST(r6, 0x4020aeae, &(0x7f0000000000)={0x5, [0x0, 0x800000000000000, 0xfc, 0x52, 0x4]})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0x4020940d, 0x20000000)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0x3})
ioctl$KVM_ARM_VCPU_FINALIZE(r9, 0x4004aec2, &(0x7f0000000080)=0x6)

1h13m49.087241525s ago: executing program 1 (id=273):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a) (async)
r6 = syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffe, 0x40) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r8, 0x5760, 0x2000001c) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x2}) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x2, 0x80000, 0x7, 0x0, 0xdc}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) (async)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

1h13m2.449541627s ago: executing program 32 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f00000000c0)=0x1})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_REG_LIST(r6, 0x4020aeae, &(0x7f0000000000)={0x5, [0x0, 0x800000000000000, 0xfc, 0x52, 0x4]})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0x4020940d, 0x20000000)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0x3})
ioctl$KVM_ARM_VCPU_FINALIZE(r9, 0x4004aec2, &(0x7f0000000080)=0x6)

1h13m0.159702157s ago: executing program 33 (id=273):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a) (async)
r6 = syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffe, 0x40) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r8, 0x5760, 0x2000001c) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x2}) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x2, 0x80000, 0x7, 0x0, 0xdc}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) (async)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

31m22.587283455s ago: executing program 3 (id=597):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x836)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@its_setup={0x82, 0x28, {0x0, 0x0, 0x293}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x1}}], 0x48}, &(0x7f0000000300)=[@featur2={0x1, 0x6}], 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x30)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000})
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x3})
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000140)={0x10003, 0x0, &(0x7f0000ffe000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000001c0), 0xa8401, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r14, 0x3, 0x4000010, r13, 0x0)
r15 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000040)=@arm64_extra={0x3d, &(0x7f00000000c0)=0x2})

30m49.97746176s ago: executing program 3 (id=599):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
close(r6)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0)
r8 = eventfd2(0x0, 0x0)
close(r8)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r8, &(0x7f0000000180)=0x5, 0xfffffde3)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@riscv64_smstateen_csr={0x8030000003020000, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

30m47.393958099s ago: executing program 2 (id=600):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000000)=0x78}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x1, 0xffffffffffffffff, 0x1}) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000000)=0x5})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r8 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async)
r10 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d)
ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400000004)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000000c0)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000240)=0xc1a}) (async)
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0xd4100, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r15, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x8, 0x5, 0x0}) (async)
ioctl$KVM_DIRTY_TLB(r12, 0x4010aeaa, &(0x7f0000000280)={0x9, 0xa})

30m38.029839869s ago: executing program 3 (id=601):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4eed40, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000180)}, 0x0, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) (rerun: 32)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000240)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64)
r6 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000040)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)}) (async)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) (async)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) (async)
r13 = eventfd2(0x2000003, 0x0)
close(r13)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r13, &(0x7f0000000180)=0x5, 0xfffffde3)
mmap$KVM_VCPU(&(0x7f0000e7c000/0x3000)=nil, 0x930, 0xf, 0x4000010, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22)

30m36.544518772s ago: executing program 2 (id=602):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

30m24.471579928s ago: executing program 3 (id=603):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
close(r0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r5})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@riscv64_f={0x7, &(0x7f0000000740)=0x8001})
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[@svc={0x122, 0x40, {0x0, [0x4, 0x7f, 0x40000, 0x40, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e668, 0xfff}}, @msr={0x14, 0x20, {0x603000000013df5f, 0x8}}, @msr={0x14, 0x20, {0x603000000013dea7, 0x2}}, @uexit={0x0, 0x18}, @eret={0xe6, 0x18, 0x7}, @uexit={0x0, 0x18, 0x10}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x80000000, 0xc}}, @hvc={0x32, 0x40, {0x8200000a, [0x3, 0x3c777301, 0x1, 0x8000000000000000, 0x1ff]}}, @hvc={0x32, 0x40, {0x2000000, [0x97, 0x1e, 0x5, 0x5, 0x1]}}, @uexit={0x0, 0x18, 0x73b}, @code={0xa, 0x6c, {"000028d5000008d5007008d500008052008008d5e0bc89d200c0b0f2c10180d2020180d2830180d2c40080d2020000d440e48ed20040b8f2610180d2820180d2e30180d2440080d2020000d40034000f007008d5000080da"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x1, 0x8, 0x8, 0x6, 0x1}}, @hvc={0x32, 0x40, {0xc4000001, [0x7, 0x800, 0x4, 0x6, 0x8000000000000004]}}, @eret={0xe6, 0x18, 0x8}, @smc={0x1e, 0x40, {0x5000000, [0x0, 0x1b3, 0x6, 0x4, 0xd8]}}, @msr={0x14, 0x20, {0x603000000013c102, 0x8001}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x84000007, [0x9, 0x3, 0x7, 0x2, 0xbce]}}, @its_send_cmd={0xaa, 0x88, {0x4, 0x1, 0x7, 0xd, 0x409, 0x400800, 0x3}}, @eret={0xe6, 0x18, 0x7}, @hvc={0x32, 0x40, {0x20, [0x6e, 0x3, 0x800000000000, 0x3]}}, @msr={0x14, 0x20, {0x603000000013c527, 0xff}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xc00, 0x7, 0x2}}, @irq_setup={0x46, 0x18, {0x0, 0x18a}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x0, 0x1, 0xd, 0x1}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013de91}}, @msr={0x14, 0x20, {0x603000000013e08c, 0x2}}], 0x4b4}, &(0x7f0000000700)=[@featur2={0x1, 0x40}], 0x1)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f91000/0x1000)=nil, r13, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000ea0000/0x1000)=nil, r13, 0x0, 0x20010, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r14 = eventfd2(0x0, 0x0)
close(r14)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

30m24.15910195s ago: executing program 2 (id=604):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = eventfd2(0xab8, 0x80000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7fff, 0x2, r2})
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x9})
eventfd2(0x5, 0x800)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r1, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)

30m10.130933241s ago: executing program 2 (id=605):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=[@mrs={0xbe, 0x18, {0x6030000000138045}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x12b}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x2, 0x7, 0x8, 0x2}}, @code={0xa, 0xcc, {"0068216e205c97d20040b8f2a10180d2e20180d2630080d2840080d2020000d4008008d540338dd20040b0f2c10180d2620080d2a30080d2e40180d2020000d460908dd200c0b8f2210080d2a20080d2c30180d2040080d2020000d4609092d20060b8f2a10080d2620080d2230180d2840180d2020000d4a0d29dd20020b0f2a10080d2a20080d2230180d2e40080d2020000d4008008d50000189e805d90d200e0b8f2210180d2420180d2c30180d2440080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x1, 0x121}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280, 0x15ae2354}}, @hvc={0x32, 0x40, {0xc400000d, [0x2, 0xfffffffffffffffd, 0x2, 0x2, 0x7]}}, @eret={0xe6, 0x18, 0x2}, @msr={0x14, 0x20, {0x3dff, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x7, 0x6, 0x1, 0x4}}, @code={0xa, 0x6c, {"000008d5df3003d5006c202e000000ac000400fca04589d200a0b0f2e10080d2420180d2c30080d2440180d2020000d40010202e000820f8e01d8bd20040b8f2a10180d2420180d2030080d2e40080d2020000d40000601f"}}, @irq_setup={0x46, 0x18, {0x2, 0x2cd}}, @irq_setup={0x46, 0x18, {0x4, 0x3ab}}, @uexit={0x0, 0x18, 0x200}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x1cd}}, @uexit={0x0, 0x18, 0x8000}, @svc={0x122, 0x40, {0x0, [0x5, 0x3, 0xc1, 0xfffffffffffff4ec, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x6, 0x9}}, @hvc={0x32, 0x40, {0x8400000a, [0x7, 0x4, 0x8, 0x1ff, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x108c, 0x8000, 0x1}}, @msr={0x14, 0x20, {0x603000000013c10a}}], 0x410}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xb702, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x141001, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100))
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x2, 0x100) (async)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (async)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x29)

30m8.449818998s ago: executing program 3 (id=606):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x8, <r4=>0xffffffffffffffff, 0x1})
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x13, r4, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x93})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff})
write$eventfd(r5, &(0x7f00000001c0)=0x3, 0xfdef)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

29m58.73334739s ago: executing program 3 (id=607):
r0 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x7ffffff9})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000e9e000/0x6000)=nil, 0x0, 0x6, 0x13, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000240)="5eb99bac6b66a9bafc1df485821bb407283d7a0a29460b0522d195908e23c34e25d9b09515819d6de6638f6eae8aa98bfee843083b155e0cf0fa46341ae0e6afafca5c61c15bf836", 0x0, 0x48)
r13 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x5f37b0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@other={0x81, &(0x7f0000000100)=0xfffffffffffffffc})
ioctl$KVM_CREATE_VM(r13, 0x401c5820, 0x20000007)
r14 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r15, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r16, 0x3, 0x11, r14, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r14, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x5421, 0x20004000)

29m48.214141158s ago: executing program 2 (id=608):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x40)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x9, 0x4})
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) (async)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x40) (async)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x9, 0x4}) (async)

29m39.481919321s ago: executing program 2 (id=609):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x7ffffff9})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xe, 0x4c, 0xe, 0x0, 0x0, 0x7f, 0x0, 0x74, 0x23, 0x80, 0x35, 0xfa, 0x0, 0x0, 0x8, 0x3, 0x8, 0x8, 0x6, '\x00', 0xe9, 0x4})
openat$kvm(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (rerun: 64)
write$eventfd(r8, &(0x7f00000001c0)=0x4, 0x4d)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0})

29m12.720948009s ago: executing program 34 (id=607):
r0 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x7ffffff9})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000e9e000/0x6000)=nil, 0x0, 0x6, 0x13, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000240)="5eb99bac6b66a9bafc1df485821bb407283d7a0a29460b0522d195908e23c34e25d9b09515819d6de6638f6eae8aa98bfee843083b155e0cf0fa46341ae0e6afafca5c61c15bf836", 0x0, 0x48)
r13 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x5f37b0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@other={0x81, &(0x7f0000000100)=0xfffffffffffffffc})
ioctl$KVM_CREATE_VM(r13, 0x401c5820, 0x20000007)
r14 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r15, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r16, 0x3, 0x11, r14, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r14, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x5421, 0x20004000)

28m52.321483896s ago: executing program 35 (id=609):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x603000000010004a, &(0x7f0000000100)=0x7ffffff9})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xe, 0x4c, 0xe, 0x0, 0x0, 0x7f, 0x0, 0x74, 0x23, 0x80, 0x35, 0xfa, 0x0, 0x0, 0x8, 0x3, 0x8, 0x8, 0x6, '\x00', 0xe9, 0x4})
openat$kvm(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (rerun: 64)
write$eventfd(r8, &(0x7f00000001c0)=0x4, 0x4d)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0})

21m17.200055041s ago: executing program 4 (id=615):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000000012)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c807}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000840)=0x11})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x9, 0xf7, 0x9, 0x0, 0x9, 0x6, 0xa, 0x3, 0x8, 0x0, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x8, <r12=>0xffffffffffffffff, 0x1})
write$eventfd(r12, &(0x7f00000001c0)=0x8100000001, 0x2d73)
syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000880)=[@msr={0x14, 0x20, {0x603000000013dea5, 0x10}}, @svc={0x122, 0x40, {0x86000000, [0xad5, 0x0, 0xfffffffffffffffa, 0xd, 0x7]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0xa2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x878a}}, @svc={0x122, 0x40, {0x33000029, [0x1, 0x600000000000, 0xa08, 0x8, 0xffffffffffffefff]}}, @uexit={0x0, 0x18, 0xf4}, @svc={0x122, 0x40, {0xc4000053, [0x6, 0x3fc0000000, 0x8000000000000000, 0x2, 0x5ede]}}, @smc={0x1e, 0x40, {0x100, [0x9, 0x4, 0x8, 0xbd7, 0x9]}}, @svc={0x122, 0x40, {0x84000010, [0xfffffffffffffffc, 0x3, 0x10, 0x0, 0x2]}}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x99, {"000cc038c0a889d20080b8f2210080d2a20080d2830080d2440180d2820000fdd4d45b9cd200e0b0f2a10180d2020080d2630180d2640080d2020000d40060006f000008d500e0b8f2210080d2220180d2630080d2c40180d2020000d400be8dd200a0b8f2010080d2620180d2230180d2840180d2020000d40010805f000080d20028285e"}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013e65a}}, @smc={0x1e, 0x40, {0x40, [0x5, 0x4, 0x2, 0xd161, 0x7f]}}, @hvc={0x32, 0x40, {0xc4000012, [0x7c3, 0x4, 0x5, 0x9fc4, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x180, 0xfffffffffffff2ee, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0x8, 0x9, 0x3ff, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x188}}, @mrs={0xbe, 0x18, {0x603000000013c200}}, @smc={0x1e, 0x40, {0x800, [0x9, 0x0, 0x5, 0x8, 0x4]}}, @eret={0xe6, 0x18, 0x9963}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x1, 0x8, 0x3, 0x4}}, @uexit={0x0, 0x18, 0x9}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x3, 0x5, 0x8, 0xb, 0x4}}, @code={0xa, 0x9c, {"c02c90d20000b8f2810180d2420180d2c30080d2c40080d2020000d45f3003d50000691e00a0800c20fe8ad200c0b0f2210180d2a20180d2830180d2c40080d2020000d4e0dd9dd200c0b8f2a10080d2420180d2430180d2440180d2020000d40004c038007008d5e0d18cd20040b0f2010180d2c20180d2a30080d2040180d2020000d4008008d5"}}, @svc={0x122, 0x40, {0x4, [0x2, 0xb6e, 0x9, 0x6]}}, @smc={0x1e, 0x40, {0x84000013, [0x6, 0x4, 0xb, 0x5, 0x8]}}, @svc={0x122, 0x40, {0x84000050, [0x200000000085, 0x7fffffffffffffff, 0x4, 0x1, 0x2]}}, @mrs={0xbe, 0x18, {0x6030000000138004}}], 0x5fd}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x8})

20m54.187879843s ago: executing program 4 (id=617):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x7})
r5 = eventfd2(0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013c006, &(0x7f0000000280)=0x3})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r5})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000180)=@other={0x1, &(0x7f0000000100)=0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x3, 0x0, 0x209, 0x6, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002})
write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x90)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000000)={0x6000})

20m37.322623027s ago: executing program 5 (id=618):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x80a0000, 0x0, 0x1})
munmap(&(0x7f0000e7a000/0x3000)=nil, 0x3000)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6f})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff})
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eab000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_ARM_VCPU_FINALIZE(r6, 0x4004aec2, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

20m30.79741035s ago: executing program 4 (id=619):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x8, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x6, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

20m16.950933729s ago: executing program 5 (id=620):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r7, 0x3, 0x40b2811, r6, 0x6000)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r1, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000)

19m59.584861347s ago: executing program 4 (id=621):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async, rerun: 32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (rerun: 32)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x5, 0xa, 0xfd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0xc4000001, [0x80000000, 0x8, 0x3, 0x7f, 0x800]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19m59.583777427s ago: executing program 5 (id=622):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f000000d000/0x4000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
eventfd2(0x0, 0x0)
close(0xffffffffffffffff)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x85c7})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x8012, r7, 0x0)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@riscv64_smstateen_csr={0x8030000003020000, 0x0})

19m44.903341382s ago: executing program 4 (id=623):
r0 = eventfd2(0x0, 0x0)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x3, 0x5, 0x0})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
write$eventfd(r0, 0x0, 0x0)

19m41.749912876s ago: executing program 5 (id=624):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf})
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r2, 0x1000001, 0x27013, r3, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x382bc663, &(0x7f0000000200)=0xffffffff})

19m30.247807615s ago: executing program 4 (id=625):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) (async)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013dcf0, 0x1}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
r11 = eventfd2(0x0, 0x0) (async)
close(0xffffffffffffffff)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
r15 = ioctl$KVM_CREATE_VM(r14, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xb704, 0x0) (async)
write$eventfd(r11, &(0x7f0000000180)=0x5, 0xfffffde3) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
write$eventfd(r11, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

19m21.167750151s ago: executing program 5 (id=626):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xffffffff)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async, rerun: 32)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async, rerun: 64)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000280)={0x100000, 0x6000, 0x0, 0x2000000}) (rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) (rerun: 64)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r9, 0x800454d3, 0x10000000000000) (async)
r10 = syz_kvm_vgic_v3_setup(r6, 0xffffffffffbffffc, 0x120)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x8080000}) (async, rerun: 64)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000ae9000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000160003, &(0x7f0000000200)=0x1a8}) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r1, 0x3000001, 0x11, r13, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7) (async)
r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000a49000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@mrs={0xbe, 0x18, {0x3fe7}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

19m8.0327016s ago: executing program 5 (id=627):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x100)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0xd0c19de284cd3ebf, 0x4, 0x7, 0x0, 0x6})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0xfffffffffffffffe)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x100) (async)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0xd0c19de284cd3ebf, 0x4, 0x7, 0x0, 0x6}) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0xfffffffffffffffe) (async)

18m43.077742851s ago: executing program 36 (id=625):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) (async)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x2900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013dcf0, 0x1}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
r11 = eventfd2(0x0, 0x0) (async)
close(0xffffffffffffffff)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
r15 = ioctl$KVM_CREATE_VM(r14, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xb704, 0x0) (async)
write$eventfd(r11, &(0x7f0000000180)=0x5, 0xfffffde3) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
write$eventfd(r11, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

18m19.15161239s ago: executing program 37 (id=627):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x100)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0xd0c19de284cd3ebf, 0x4, 0x7, 0x0, 0x6})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0xfffffffffffffffe)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x100) (async)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0xd0c19de284cd3ebf, 0x4, 0x7, 0x0, 0x6}) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0xfffffffffffffffe) (async)

2m58.791317734s ago: executing program 7 (id=664):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xb})
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0xd000})
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc2881, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r11, 0x3, 0x40b2811, r10, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x54000, 0x6000})

2m50.870547752s ago: executing program 6 (id=665):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x7, <r5=>0xffffffffffffffff})
r6 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r6})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000aec000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000080)=@arm64={0xd, 0x8, 0x7, '\x00', 0x2d})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x2, 0x0, [{0xc9, 0x2, 0x0, 0x0, @msi={0x0, 0x8}}, {0x2, 0x1, 0x0, 0x0, @msi={0x1f, 0x0, 0x0, 0x3}}]})
munmap(&(0x7f00005ed000/0x800000)=nil, 0x800000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, 0x0})
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f00009e9000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x100001, 0x304, &(0x7f00000000c0)=0x4})
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f0000000100))
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})

2m35.280210326s ago: executing program 7 (id=666):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x7001, 0x37d03030d7a92616, 0xfffffffc})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000)
write$eventfd(r5, &(0x7f0000000040)=0x476a, 0x8)
eventfd2(0x5, 0x80000)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0xd2240, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x20000000)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f000005a000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r5, 0x3, 0x2a0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f0000000200)=0x1})
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4106931, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000406000/0x3000)=nil, 0x930, 0x1000001, 0x110, r10, 0x0)
openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0)

2m21.417330802s ago: executing program 6 (id=667):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x3c2a1c3178cda732, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100016, &(0x7f0000000100)=0xc5c5})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb335)

2m17.177744971s ago: executing program 7 (id=668):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000000)={0x5})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)

2m2.940770871s ago: executing program 6 (id=669):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000000000027)
r2 = eventfd2(0x4, 0x1000)
write$eventfd(r2, &(0x7f0000000040)=0x3, 0x8)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a0000})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0xe, 0x3, 0x0, 0x1b2, 0x99, 0xc, 0x9, 0x4, 0xa, 0x5, 0x0, 0x0, 0x6, 0x1, 0x11, 0x1, 0x9, 0xfb, '\x00', 0x97, 0x9})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x2000, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013deb3, &(0x7f00000000c0)=0x40000000003})
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
close(0x5)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)

1m54.850682815s ago: executing program 7 (id=670):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000180)=0x4})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x200, 0x1, 0xe})
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x563002, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000400000/0xc00000)=nil, r8, 0x200001e, 0x2011, r7, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000769000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000e, 0x8010, r10, 0x0)
r12 = eventfd2(0x101, 0x800)
syz_kvm_vgic_v3_setup(r5, 0x0, 0xb7a04ab30e8ab27)
write$eventfd(r12, &(0x7f0000000080)=0xfffffffffffffff7, 0x8)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

1m35.92244235s ago: executing program 6 (id=671):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7})
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x6bc4c0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, 0xffffffffffffffff, 0x1})
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x9, 0xe, 0x0, 0xa, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x8, 0xe7c})
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20001002)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r8 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r8})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x6000})

1m25.909725637s ago: executing program 7 (id=672):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000000c0)={0x7, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0x4})
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xf4)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000000)=@arm64_fw={0x6030000000140000, &(0x7f00000000c0)=0xddce})

1m15.520841472s ago: executing program 6 (id=673):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x2000003, 0x2013, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080))
close(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0x40086602, 0x110c230000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000007, 0x23ac5f9b426eccb2, 0xffffffffffffffff, 0x0)

59.793202792s ago: executing program 7 (id=674):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000006)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000769000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x1c}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x3, 0x16831, 0xffffffffffffffff, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)

52.014666544s ago: executing program 6 (id=675):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r2, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@irq_setup={0x46, 0x18, {0x2, 0x1c4}}, @eret={0xe6, 0x18, 0x610d798}, @msr={0x14, 0x20, {0x6030000000138077, 0x7}}, @uexit={0x0, 0x18, 0xe81}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e537}}, @code={0xa, 0x9c, {"007008d5e0cb9fd20080b8f2810080d2220180d2430080d2a40080d2020000d4000000bc007008d5601288d20000b0f2210080d2e20080d2c30180d2440080d2020000d400ce8fd20020b8f2610180d2e20080d2030080d2a40180d2020000d400800048802784d20000b0f2410180d2c20180d2630080d2e40180d2020000d4000008d50080601f"}}, @code={0xa, 0xcc, {"407f8fd200c0b8f2a10180d2a20080d2a30080d2840080d2020000d400209f0c806a94d20080b8f2a10080d2020080d2e30180d2c40080d2020000d480e58bd20060b0f2010180d2e20080d2a30180d2a40180d2020000d400a99ed20060b0f2210180d2020180d2a30180d2840180d2020000d4809e95d20080b0f2e10180d2420080d2430080d2240080d2020000d4807f9bd200a0b8f2410180d2020080d2030080d2040080d2020000d40060206e000840f800008072"}}, @irq_setup={0x46, 0x18, {0x4, 0xc5}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x25}}, @mrs={0xbe, 0x18, {0x603000000013df70}}, @eret={0xe6, 0x18, 0xbe}, @hvc={0x32, 0x40, {0x200, [0xfffffffffffff900, 0x7fffffff, 0xc1, 0xfffffffffffffff7, 0x9]}}, @smc={0x1e, 0x40, {0x20, [0x7, 0x3, 0x3, 0x9, 0x5d2]}}, @smc={0x1e, 0x40, {0x84000000, [0xfffffffffffffff8, 0x1, 0x8, 0x8000000000000001, 0x2]}}, @msr={0x14, 0x20, {0x9a71, 0x8}}, @smc={0x1e, 0x40, {0x400, [0x1, 0x3, 0x9, 0x7, 0x4]}}, @svc={0x122, 0x40, {0x32000000, [0x5d6, 0x4, 0x7f, 0x9, 0xfff]}}, @mrs={0xbe, 0x18, {0x603000000013c608}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x2cf}}, @irq_setup={0x46, 0x18, {0x0, 0x193}}, @svc={0x122, 0x40, {0x6000000, [0xd, 0x7fffffffffffffff, 0x9, 0x6]}}, @code={0xa, 0xe4, {"40ae9ad200c0b0f2e10180d2e20080d2430180d2240080d2020000d40000621e40458cd20060b8f2a10080d2220080d2430180d2440080d2020000d420da87d20020b0f2410180d2820080d2430180d2440080d2020000d400c8212e607d80d20000b8f2210180d2020080d2430080d2840080d2020000d460c384d20080b0f2e10180d2e20180d2230080d2e40180d2020000d4c0618cd200c0b8f2c10080d2620080d2a30180d2c40180d2020000d4000000f8001f81d20040b0f2a10080d2c20080d2c30180d2a40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xeb}}, @irq_setup={0x46, 0x18, {0x0, 0x236}}], 0x58c}, &(0x7f0000000080)=[@featur1={0x1, 0x8c}], 0x1)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000000000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000740)=[@uexit={0x0, 0x18, 0x74}, @code={0xa, 0x84, {"000008d5008008d50098210e000a83d20040b8f2a10180d2220080d2630080d2640080d2020000d4000028d5000008d5000040bde0b880d20060b0f2410180d2220080d2230080d2440080d2020000d4007008d500e184d200c0b8f2610180d2820080d2e30180d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0xffff, [0x1, 0x3, 0x80000000, 0x2, 0x5]}}, @hvc={0x32, 0x40, {0xc5000020, [0x9, 0xc7d, 0x80000000, 0x2, 0x52f118b9]}}, @smc={0x1e, 0x40, {0x86000001, [0x0, 0x5, 0x7, 0x800, 0xfffffffffffffffc]}}, @eret={0xe6, 0x18, 0x3}, @memwrite={0x6e, 0x30, @generic={0x2, 0xef1, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013dce0, 0xffffffff}}], 0x1c4}], 0x1, 0x0, &(0x7f0000000940)=[@featur2={0x1, 0x19}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

8.291004615s ago: executing program 38 (id=674):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000006)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000769000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000006, [0x7, 0x3, 0x2, 0x3f8b, 0xf7b0]}}], 0x40}, &(0x7f00000000c0)=[@featur1={0x1, 0x1c}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x3, 0x16831, 0xffffffffffffffff, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)

0s ago: executing program 39 (id=675):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r2, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@irq_setup={0x46, 0x18, {0x2, 0x1c4}}, @eret={0xe6, 0x18, 0x610d798}, @msr={0x14, 0x20, {0x6030000000138077, 0x7}}, @uexit={0x0, 0x18, 0xe81}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e537}}, @code={0xa, 0x9c, {"007008d5e0cb9fd20080b8f2810080d2220180d2430080d2a40080d2020000d4000000bc007008d5601288d20000b0f2210080d2e20080d2c30180d2440080d2020000d400ce8fd20020b8f2610180d2e20080d2030080d2a40180d2020000d400800048802784d20000b0f2410180d2c20180d2630080d2e40180d2020000d4000008d50080601f"}}, @code={0xa, 0xcc, {"407f8fd200c0b8f2a10180d2a20080d2a30080d2840080d2020000d400209f0c806a94d20080b8f2a10080d2020080d2e30180d2c40080d2020000d480e58bd20060b0f2010180d2e20080d2a30180d2a40180d2020000d400a99ed20060b0f2210180d2020180d2a30180d2840180d2020000d4809e95d20080b0f2e10180d2420080d2430080d2240080d2020000d4807f9bd200a0b8f2410180d2020080d2030080d2040080d2020000d40060206e000840f800008072"}}, @irq_setup={0x46, 0x18, {0x4, 0xc5}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x25}}, @mrs={0xbe, 0x18, {0x603000000013df70}}, @eret={0xe6, 0x18, 0xbe}, @hvc={0x32, 0x40, {0x200, [0xfffffffffffff900, 0x7fffffff, 0xc1, 0xfffffffffffffff7, 0x9]}}, @smc={0x1e, 0x40, {0x20, [0x7, 0x3, 0x3, 0x9, 0x5d2]}}, @smc={0x1e, 0x40, {0x84000000, [0xfffffffffffffff8, 0x1, 0x8, 0x8000000000000001, 0x2]}}, @msr={0x14, 0x20, {0x9a71, 0x8}}, @smc={0x1e, 0x40, {0x400, [0x1, 0x3, 0x9, 0x7, 0x4]}}, @svc={0x122, 0x40, {0x32000000, [0x5d6, 0x4, 0x7f, 0x9, 0xfff]}}, @mrs={0xbe, 0x18, {0x603000000013c608}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x2cf}}, @irq_setup={0x46, 0x18, {0x0, 0x193}}, @svc={0x122, 0x40, {0x6000000, [0xd, 0x7fffffffffffffff, 0x9, 0x6]}}, @code={0xa, 0xe4, {"40ae9ad200c0b0f2e10180d2e20080d2430180d2240080d2020000d40000621e40458cd20060b8f2a10080d2220080d2430180d2440080d2020000d420da87d20020b0f2410180d2820080d2430180d2440080d2020000d400c8212e607d80d20000b8f2210180d2020080d2430080d2840080d2020000d460c384d20080b0f2e10180d2e20180d2230080d2e40180d2020000d4c0618cd200c0b8f2c10080d2620080d2a30180d2c40180d2020000d4000000f8001f81d20040b0f2a10080d2c20080d2c30180d2a40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xeb}}, @irq_setup={0x46, 0x18, {0x0, 0x236}}], 0x58c}, &(0x7f0000000080)=[@featur1={0x1, 0x8c}], 0x1)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000000000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000740)=[@uexit={0x0, 0x18, 0x74}, @code={0xa, 0x84, {"000008d5008008d50098210e000a83d20040b8f2a10180d2220080d2630080d2640080d2020000d4000028d5000008d5000040bde0b880d20060b0f2410180d2220080d2230080d2440080d2020000d4007008d500e184d200c0b8f2610180d2820080d2e30180d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0xffff, [0x1, 0x3, 0x80000000, 0x2, 0x5]}}, @hvc={0x32, 0x40, {0xc5000020, [0x9, 0xc7d, 0x80000000, 0x2, 0x52f118b9]}}, @smc={0x1e, 0x40, {0x86000001, [0x0, 0x5, 0x7, 0x800, 0xfffffffffffffffc]}}, @eret={0xe6, 0x18, 0x3}, @memwrite={0x6e, 0x30, @generic={0x2, 0xef1, 0x5, 0x4}}, @msr={0x14, 0x20, {0x603000000013dce0, 0xffffffff}}], 0x1c4}], 0x1, 0x0, &(0x7f0000000940)=[@featur2={0x1, 0x19}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

kernel console output (not intermixed with test programs):

[  407.263452][ T3170] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.251739][ T3170] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:19779' (ED25519) to the list of known hosts.
[  625.224774][   T24] audit: type=1400 audit(624.360:61): avc:  denied  { name_bind } for  pid=3330 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  626.115768][   T24] audit: type=1400 audit(625.260:62): avc:  denied  { execute } for  pid=3331 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  626.135735][   T24] audit: type=1400 audit(625.280:63): avc:  denied  { execute_no_trans } for  pid=3331 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  655.565848][   T24] audit: type=1400 audit(654.710:64): avc:  denied  { mounton } for  pid=3331 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  655.605874][   T24] audit: type=1400 audit(654.750:65): avc:  denied  { mount } for  pid=3331 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  655.701632][ T3331] cgroup: Unknown subsys name 'net'
[  655.757933][   T24] audit: type=1400 audit(654.900:66): avc:  denied  { unmount } for  pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  656.192486][ T3331] cgroup: Unknown subsys name 'cpuset'
[  656.327324][ T3331] cgroup: Unknown subsys name 'rlimit'
[  657.232219][   T24] audit: type=1400 audit(656.370:67): avc:  denied  { setattr } for  pid=3331 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  657.250214][   T24] audit: type=1400 audit(656.390:68): avc:  denied  { mounton } for  pid=3331 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  657.274671][   T24] audit: type=1400 audit(656.420:69): avc:  denied  { mount } for  pid=3331 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  658.321801][ T3335] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  658.340852][   T24] audit: type=1400 audit(657.480:70): avc:  denied  { relabelto } for  pid=3335 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  658.364702][   T24] audit: type=1400 audit(657.510:71): avc:  denied  { write } for  pid=3335 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  658.555378][   T24] audit: type=1400 audit(657.700:72): avc:  denied  { read } for  pid=3331 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  658.577376][   T24] audit: type=1400 audit(657.720:73): avc:  denied  { open } for  pid=3331 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  658.620616][ T3331] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  717.033321][   T24] audit: type=1400 audit(716.180:74): avc:  denied  { execmem } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  721.040454][   T24] audit: type=1400 audit(720.180:75): avc:  denied  { read } for  pid=3339 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  721.059671][   T24] audit: type=1400 audit(720.200:76): avc:  denied  { read } for  pid=3338 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  721.091175][   T24] audit: type=1400 audit(720.220:77): avc:  denied  { open } for  pid=3339 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  721.151008][   T24] audit: type=1400 audit(720.290:78): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  721.426358][   T24] audit: type=1400 audit(720.570:79): avc:  denied  { module_request } for  pid=3339 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  721.446513][   T24] audit: type=1400 audit(720.590:80): avc:  denied  { module_request } for  pid=3338 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  722.483161][   T24] audit: type=1400 audit(721.610:81): avc:  denied  { sys_module } for  pid=3338 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  746.140495][ T3338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.431071][ T3338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.496377][ T3339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.797338][ T3339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.177720][ T3338] hsr_slave_0: entered promiscuous mode
[  761.271628][ T3338] hsr_slave_1: entered promiscuous mode
[  763.361869][ T3339] hsr_slave_0: entered promiscuous mode
[  763.413723][ T3339] hsr_slave_1: entered promiscuous mode
[  763.452187][ T3339] debugfs: 'hsr0' already exists in 'hsr'
[  763.459945][ T3339] Cannot create hsr debugfs directory
[  771.610813][   T24] audit: type=1400 audit(770.750:82): avc:  denied  { create } for  pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  771.672305][   T24] audit: type=1400 audit(770.750:83): avc:  denied  { write } for  pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  771.714532][   T24] audit: type=1400 audit(770.840:84): avc:  denied  { read } for  pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  771.877574][ T3338] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  772.227509][ T3338] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  772.525318][ T3338] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  772.921132][ T3338] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  774.630162][ T3339] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  774.843089][ T3339] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  775.105638][ T3339] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  775.257936][ T3339] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  787.542751][ T3338] 8021q: adding VLAN 0 to HW filter on device bond0
[  790.451651][ T3339] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.185772][ T3338] veth0_vlan: entered promiscuous mode
[  846.617406][ T3338] veth1_vlan: entered promiscuous mode
[  848.982964][ T3338] veth0_macvtap: entered promiscuous mode
[  849.289067][ T3339] veth0_vlan: entered promiscuous mode
[  849.593747][ T3338] veth1_macvtap: entered promiscuous mode
[  850.101989][ T3339] veth1_vlan: entered promiscuous mode
[  852.042930][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.136400][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.142304][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.237148][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.432222][ T3339] veth0_macvtap: entered promiscuous mode
[  854.033117][ T3339] veth1_macvtap: entered promiscuous mode
[  855.147436][   T24] audit: type=1400 audit(854.290:85): avc:  denied  { mount } for  pid=3338 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  855.285122][   T24] audit: type=1400 audit(854.430:86): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/syzkaller.ZYZdBl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  855.426630][   T24] audit: type=1400 audit(854.570:87): avc:  denied  { mount } for  pid=3338 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  855.913264][   T24] audit: type=1400 audit(855.030:88): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/syzkaller.ZYZdBl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  856.146090][   T24] audit: type=1400 audit(855.240:89): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/syzkaller.ZYZdBl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  856.600417][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.609696][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.627270][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.640710][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.816786][   T24] audit: type=1400 audit(855.960:90): avc:  denied  { unmount } for  pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  857.053747][   T24] audit: type=1400 audit(856.190:91): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  857.186173][   T24] audit: type=1400 audit(856.320:92): avc:  denied  { mount } for  pid=3338 comm="syz-executor" name="/" dev="gadgetfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  857.550337][   T24] audit: type=1400 audit(856.690:93): avc:  denied  { mount } for  pid=3338 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  857.689535][   T24] audit: type=1400 audit(856.820:94): avc:  denied  { mounton } for  pid=3338 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  859.120410][ T3338] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  860.420429][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  860.435195][   T24] audit: type=1400 audit(859.550:96): avc:  denied  { read write } for  pid=3338 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  860.474861][   T24] audit: type=1400 audit(859.600:97): avc:  denied  { open } for  pid=3338 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  860.523417][   T24] audit: type=1400 audit(859.650:98): avc:  denied  { ioctl } for  pid=3338 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  870.197788][   T24] audit: type=1400 audit(869.270:99): avc:  denied  { read } for  pid=3490 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  870.224857][   T24] audit: type=1400 audit(869.340:100): avc:  denied  { open } for  pid=3490 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  870.633726][   T24] audit: type=1400 audit(869.780:101): avc:  denied  { ioctl } for  pid=3490 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  878.624994][   T24] audit: type=1400 audit(877.690:102): avc:  denied  { append } for  pid=3497 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  879.484660][   T24] audit: type=1400 audit(878.630:103): avc:  denied  { write } for  pid=3497 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  882.501842][   T24] audit: type=1400 audit(881.640:104): avc:  denied  { execute } for  pid=3500 comm="syz.1.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  953.270371][   T24] audit: type=1400 audit(952.410:105): avc:  denied  { map } for  pid=3544 comm="syz.0.15" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  953.299880][   T24] audit: type=1400 audit(952.440:106): avc:  denied  { execute } for  pid=3544 comm="syz.0.15" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  996.510694][   T24] audit: type=1400 audit(995.650:107): avc:  denied  { ioctl } for  pid=3567 comm="syz.1.22" path="net:[4026531833]" dev="nsfs" ino=4026531833 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1079.473950][   T24] audit: type=1400 audit(1078.560:108): avc:  denied  { execute } for  pid=3619 comm="syz.1.37" path=2F31382FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1115.504572][   T24] audit: type=1400 audit(1114.590:109): avc:  denied  { setattr } for  pid=3642 comm="syz.1.44" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1360.105912][ T3812] kvm [3812]: Failed to find VMA for hva 0x20d8d000
[ 1594.745847][ T3960] kvm [3960]: Failed to find VMA for hva 0x20c01000
[ 1594.852211][ T3960] kvm [3960]: Failed to find VMA for hva 0x20c01000
[ 1604.201937][ T3965] kvm [3965]: Failed to find VMA for hva 0x20648000
[ 1626.076136][   T24] audit: type=1400 audit(1625.130:110): avc:  denied  { create } for  pid=3976 comm="syz.1.137" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1626.251902][   T24] audit: type=1400 audit(1625.400:111): avc:  denied  { map } for  pid=3976 comm="syz.1.137" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1626.324444][   T24] audit: type=1400 audit(1625.450:112): avc:  denied  { read } for  pid=3976 comm="syz.1.137" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1628.072064][ T3978] KVM: debugfs: duplicate directory 3978-5
[ 1879.558651][    C0] hrtimer: interrupt took 1019880 ns
[ 1946.513663][ T4166] kvm [4166]: Failed to find VMA for hva 0x21016000
[ 1948.163900][ T4166] kvm [4166]: Failed to find VMA for hva 0x21016000
[ 2068.907982][ T4228] kvm [4228]: Failed to find VMA for hva 0x20c79000
[ 2503.843711][ T4460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2505.031576][ T4460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2506.002351][ T4462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2507.311488][ T4462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2534.471753][ T4460] hsr_slave_0: entered promiscuous mode
[ 2534.513658][ T4460] hsr_slave_1: entered promiscuous mode
[ 2534.543057][ T4460] debugfs: 'hsr0' already exists in 'hsr'
[ 2534.550045][ T4460] Cannot create hsr debugfs directory
[ 2536.875553][ T4462] hsr_slave_0: entered promiscuous mode
[ 2536.973400][ T4462] hsr_slave_1: entered promiscuous mode
[ 2537.054155][ T4462] debugfs: 'hsr0' already exists in 'hsr'
[ 2537.071740][ T4462] Cannot create hsr debugfs directory
[ 2555.436995][ T4460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2556.291511][ T4460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2556.647355][ T4460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2558.706750][ T4460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2561.917820][ T4202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2562.722671][ T4202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2563.514463][ T4202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2564.524323][ T4202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2567.581893][ T4462] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2568.095541][ T4462] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2568.515214][ T4462] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2569.655851][ T4462] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2584.234900][ T4202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2584.967719][ T4202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2585.313789][ T4202] bond0 (unregistering): Released all slaves
[ 2587.561862][ T4202] hsr_slave_0: left promiscuous mode
[ 2587.652739][ T4202] hsr_slave_1: left promiscuous mode
[ 2588.169653][ T4202] veth1_macvtap: left promiscuous mode
[ 2588.173261][ T4202] veth0_macvtap: left promiscuous mode
[ 2588.191569][ T4202] veth1_vlan: left promiscuous mode
[ 2588.201071][ T4202] veth0_vlan: left promiscuous mode
[ 2609.535687][ T4536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2611.055793][ T4536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.437586][ T4536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2613.514556][ T4536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2633.851234][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2634.304931][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2634.462232][ T4536] bond0 (unregistering): Released all slaves
[ 2636.296825][ T4536] hsr_slave_0: left promiscuous mode
[ 2636.370826][ T4536] hsr_slave_1: left promiscuous mode
[ 2636.647269][ T4536] veth1_macvtap: left promiscuous mode
[ 2636.659861][ T4536] veth0_macvtap: left promiscuous mode
[ 2636.664512][ T4536] veth1_vlan: left promiscuous mode
[ 2636.679927][ T4536] veth0_vlan: left promiscuous mode
[ 2655.926507][ T4460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2659.846647][ T4462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2745.046380][ T4460] veth0_vlan: entered promiscuous mode
[ 2746.064199][ T4460] veth1_vlan: entered promiscuous mode
[ 2750.281849][ T4460] veth0_macvtap: entered promiscuous mode
[ 2751.190067][ T4462] veth0_vlan: entered promiscuous mode
[ 2751.342104][ T4460] veth1_macvtap: entered promiscuous mode
[ 2753.031814][ T4462] veth1_vlan: entered promiscuous mode
[ 2756.925471][   T21] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2756.926973][   T21] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2756.945204][   T21] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2756.980863][   T21] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2759.404382][ T4462] veth0_macvtap: entered promiscuous mode
[ 2760.604885][ T4462] veth1_macvtap: entered promiscuous mode
[ 2764.117088][   T24] audit: type=1400 audit(2763.260:113): avc:  denied  { unmount } for  pid=4460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 2765.641969][ T4526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2765.650147][ T4526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2765.682824][ T4526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2765.692016][ T4526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3437.285827][ T5091] kvm [5091]: Failed to find VMA for hva 0x20be2000
[ 3620.165532][ T5179] debugfs: 'vgic-its-state@8080000' already exists in '5179-6'
[ 5137.222299][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5138.141838][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5175.422994][ T5947] hsr_slave_0: entered promiscuous mode
[ 5175.564855][ T5947] hsr_slave_1: entered promiscuous mode
[ 5180.812001][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5181.342465][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5192.246035][ T3857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5194.392111][ T3857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5195.913032][ T3857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5197.103915][ T3857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5216.023740][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5216.563093][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5216.726489][ T3857] bond0 (unregistering): Released all slaves
[ 5217.309609][ T5947] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 5218.845321][ T3857] hsr_slave_0: left promiscuous mode
[ 5218.925320][ T3857] hsr_slave_1: left promiscuous mode
[ 5219.233319][ T3857] veth1_macvtap: left promiscuous mode
[ 5219.237031][ T3857] veth0_macvtap: left promiscuous mode
[ 5219.257763][ T3857] veth1_vlan: left promiscuous mode
[ 5219.270778][ T3857] veth0_vlan: left promiscuous mode
[ 5239.024050][ T5947] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 5239.470212][ T5947] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 5240.683589][ T5947] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 5242.896047][ T5958] hsr_slave_0: entered promiscuous mode
[ 5242.994278][ T5958] hsr_slave_1: entered promiscuous mode
[ 5243.063593][ T5958] debugfs: 'hsr0' already exists in 'hsr'
[ 5243.070481][ T5958] Cannot create hsr debugfs directory
[ 5246.664428][ T3857] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5248.103766][ T3857] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5250.214804][ T3857] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5251.885094][ T3857] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5273.562669][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5274.212184][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5274.571854][ T3857] bond0 (unregistering): Released all slaves
[ 5276.832252][ T3857] hsr_slave_0: left promiscuous mode
[ 5276.961167][ T3857] hsr_slave_1: left promiscuous mode
[ 5277.410956][ T3857] veth1_macvtap: left promiscuous mode
[ 5277.431556][ T3857] veth0_macvtap: left promiscuous mode
[ 5277.437039][ T3857] veth1_vlan: left promiscuous mode
[ 5277.454918][ T3857] veth0_vlan: left promiscuous mode
[ 5304.662403][ T5958] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 5305.084315][ T5958] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 5305.683736][ T5958] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5306.249538][ T5958] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5309.892520][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5335.144759][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5444.217543][ T5947] veth0_vlan: entered promiscuous mode
[ 5445.485625][ T5947] veth1_vlan: entered promiscuous mode
[ 5449.805458][ T5947] veth0_macvtap: entered promiscuous mode
[ 5450.422478][ T5947] veth1_macvtap: entered promiscuous mode
[ 5454.184123][ T5959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5454.185691][ T5959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5454.217378][ T5959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5454.337677][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5479.484562][ T5958] veth0_vlan: entered promiscuous mode
[ 5481.072902][ T5958] veth1_vlan: entered promiscuous mode
[ 5485.747140][ T5958] veth0_macvtap: entered promiscuous mode
[ 5486.865200][ T5958] veth1_macvtap: entered promiscuous mode
[ 5492.089380][ T5959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5492.399865][ T5959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5492.672581][ T4536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5492.687913][ T4536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5743.441642][ T3857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5747.286810][ T3857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5749.236632][ T3857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5751.236291][ T3857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5782.996330][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5783.473856][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5783.731817][ T3857] bond0 (unregistering): Released all slaves
[ 5785.754928][ T3857] hsr_slave_0: left promiscuous mode
[ 5785.911466][ T3857] hsr_slave_1: left promiscuous mode
[ 5786.476233][ T3857] veth1_macvtap: left promiscuous mode
[ 5786.490773][ T3857] veth0_macvtap: left promiscuous mode
[ 5786.505395][ T3857] veth1_vlan: left promiscuous mode
[ 5786.533252][ T3857] veth0_vlan: left promiscuous mode
[ 5813.597273][ T3857] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5815.786947][ T3857] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5817.455308][ T3857] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5819.821405][ T3857] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5847.649718][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5848.106391][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5848.342423][ T3857] bond0 (unregistering): Released all slaves
[ 5850.319815][ T3857] hsr_slave_0: left promiscuous mode
[ 5850.456980][ T3857] hsr_slave_1: left promiscuous mode
[ 5851.040865][ T3857] veth1_macvtap: left promiscuous mode
[ 5851.044009][ T3857] veth0_macvtap: left promiscuous mode
[ 5851.081541][ T3857] veth1_vlan: left promiscuous mode
[ 5851.085429][ T3857] veth0_vlan: left promiscuous mode
[ 5893.166881][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5893.552313][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5916.895716][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5917.207684][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5925.477717][ T6275] hsr_slave_0: entered promiscuous mode
[ 5925.623805][ T6275] hsr_slave_1: entered promiscuous mode
[ 5949.783094][ T6275] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 5950.360979][ T6275] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 5950.860700][ T6275] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 5951.207633][ T6275] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 5954.267492][ T6288] hsr_slave_0: entered promiscuous mode
[ 5954.416500][ T6288] hsr_slave_1: entered promiscuous mode
[ 5954.482945][ T6288] debugfs: 'hsr0' already exists in 'hsr'
[ 5954.532202][ T6288] Cannot create hsr debugfs directory
[ 5978.527298][ T6288] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5979.107073][ T6288] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5979.536324][ T6288] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5980.194358][ T6288] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5989.333645][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6018.034962][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6159.480741][ T6275] veth0_vlan: entered promiscuous mode
[ 6160.913473][ T6275] veth1_vlan: entered promiscuous mode
[ 6164.703490][ T6275] veth0_macvtap: entered promiscuous mode
[ 6165.232694][ T6275] veth1_macvtap: entered promiscuous mode
[ 6169.652857][ T5961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6169.665194][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6169.840455][ T5961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6169.845156][ T5961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6193.645540][ T6288] veth0_vlan: entered promiscuous mode
[ 6195.754161][ T6288] veth1_vlan: entered promiscuous mode
[ 6201.782656][ T6288] veth0_macvtap: entered promiscuous mode
[ 6203.013980][ T6288] veth1_macvtap: entered promiscuous mode
[ 6208.724992][ T6475] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6208.790004][ T3896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6208.790912][ T3896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6208.791634][ T3896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6833.684077][ T6437] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6836.889952][ T6437] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6839.617083][ T6437] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6842.013646][ T6437] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6881.226054][ T6437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6882.934104][ T6437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6883.516062][ T6437] bond0 (unregistering): Released all slaves
[ 6887.367383][ T6437] hsr_slave_0: left promiscuous mode
[ 6887.684061][ T6437] hsr_slave_1: left promiscuous mode
[ 6888.890518][ T6437] veth1_macvtap: left promiscuous mode
[ 6888.895849][ T6437] veth0_macvtap: left promiscuous mode
[ 6888.900551][ T6437] veth1_vlan: left promiscuous mode
[ 6888.901733][ T6437] veth0_vlan: left promiscuous mode
[ 7060.494265][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7061.053907][ T6791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7061.673647][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7062.222017][ T6791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7121.904630][ T6791] hsr_slave_0: entered promiscuous mode
[ 7122.004559][ T6791] hsr_slave_1: entered promiscuous mode
[ 7122.211050][ T6791] debugfs: 'hsr0' already exists in 'hsr'
[ 7122.229246][ T6791] Cannot create hsr debugfs directory
[ 7128.654666][ T6795] hsr_slave_0: entered promiscuous mode
[ 7128.794193][ T6795] hsr_slave_1: entered promiscuous mode
[ 7128.893791][ T6795] debugfs: 'hsr0' already exists in 'hsr'
[ 7128.951169][ T6795] Cannot create hsr debugfs directory
[ 7171.644853][ T6791] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 7173.207677][ T6791] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 7174.752608][ T6791] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 7177.686423][ T6791] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 7188.470541][ T6795] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 7189.386075][ T6795] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 7190.194398][ T6795] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 7191.195810][ T6795] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 7228.852565][   T26] INFO: task syz.7.674:6771 blocked for more than 430 seconds.
[ 7228.866504][   T26]       Not tainted syzkaller #0
[ 7228.921603][   T26]       Blocked by coredump.
[ 7228.926493][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 7228.927124][   T26] task:syz.7.674       state:D stack:0     pid:6771  tgid:6769  ppid:6288   task_flags:0x40044c flags:0x00000019
[ 7229.043478][   T26] Call trace:
[ 7229.044401][   T26]  __switch_to+0x584/0xb00 (T)
[ 7229.046737][   T26]  __schedule+0x1da4/0x3678
[ 7229.047387][   T26]  schedule+0xac/0x27c
[ 7229.047913][   T26]  schedule_timeout+0x68/0x1ec
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 7229.155898][   T26]  do_wait_for_common+0x28c/0x440
[ 7229.156583][   T26]  wait_for_completion+0x44/0x5c
[ 7229.157135][   T26]  __synchronize_srcu+0x2a4/0x320
[ 7229.157610][   T26]  synchronize_srcu+0x3d0/0x4f8
[ 7229.158070][   T26]  mmu_notifier_unregister+0x320/0x428
[ 7229.202024][   T26]  kvm_put_kvm+0x698/0xbe0
[ 7229.202637][   T26]  kvm_vm_release+0x58/0x78
[ 7229.203115][   T26]  __fput+0x4ac/0x978
[ 7229.203662][   T26]  ____fput+0x20/0x58
[ 7229.204191][   T26]  task_work_run+0x1b8/0x250
[ 7229.204700][   T26]  do_exit+0x890/0x2410
[ 7229.205198][   T26]  do_group_exit+0x1d4/0x2ac
[ 7229.205717][   T26]  get_signal+0x1440/0x154c
[ 7229.206133][   T26]  arch_do_signal_or_restart+0x23c/0x4bac
[ 7229.206670][   T26]  exit_to_user_mode_loop+0x88/0x188
[ 7229.207151][   T26]  el0_svc+0x17c/0x238
[ 7229.207613][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 7229.393915][   T26]  el0t_64_sync+0x198/0x19c
[ 7229.421366][   T26] 
[ 7229.421366][   T26] Showing all locks held in the system:
[ 7229.422007][   T26] 1 lock held by khungtaskd/26:
[ 7229.422459][   T26]  #0: ffff800087c971f8 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 7229.424992][   T26] 3 locks held by kworker/u4:2/31:
[ 7229.425521][   T26] 2 locks held by getty/3201:
[ 7229.425867][   T26]  #0: 71f00000127ca8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 7229.427588][   T26]  #1: e9ff80008ca2b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 7229.601411][   T26] 2 locks held by syz-executor/3331:
[ 7229.601763][   T26] 3 locks held by kworker/u4:7/3430:
[ 7229.602142][   T26] 3 locks held by kworker/u4:13/6475:
[ 7229.602491][   T26] 2 locks held by kworker/0:1/6559:
[ 7229.602813][   T26] 2 locks held by syz.6.675/6773:
[ 7229.603126][   T26] 3 locks held by kworker/u4:10/6787:
[ 7229.603464][   T26] 1 lock held by syz-executor/6791:
[ 7229.603768][   T26] 2 locks held by kworker/u4:12/6806:
[ 7229.604060][   T26]  #0: 39f000000d036548 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7f8/0x1d94
[ 7229.606090][   T26]  #1: ffff80008e7b7ca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x884/0x1d94
[ 7229.607760][   T26] 3 locks held by kworker/u4:14/6912:
[ 7229.749711][   T26] 4 locks held by dhcpcd-run-hook/6932:
[ 7229.750589][   T26] 
[ 7229.750926][   T26] =============================================
[ 7229.750926][   T26] 
[ 7229.751882][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 7229.757633][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 7229.759148][   T26] Hardware name: linux,dummy-virt (DT)
[ 7229.760115][   T26] Call trace:
[ 7229.760970][   T26]  show_stack+0x2c/0x3c (C)
[ 7229.762058][   T26]  __dump_stack+0x30/0x40
[ 7229.763042][   T26]  dump_stack_lvl+0x30/0x12c
[ 7229.764060][   T26]  dump_stack+0x1c/0x28
[ 7229.765052][   T26]  vpanic+0x4d0/0x848
[ 7229.765879][   T26]  vpanic+0x0/0x848
[ 7229.766766][   T26]  hung_task_panic+0x0/0x2c
[ 7229.767773][   T26]  kthread+0x4d4/0x51c
[ 7229.768737][   T26]  ret_from_fork+0x10/0x20
[ 7229.770616][   T26] Kernel Offset: disabled
[ 7229.771410][   T26] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 7229.772583][   T26] Memory Limit: none
[ 7229.774800][   T26] Rebooting in 86400 seconds..