last executing test programs:

36m23.892811051s ago: executing program 0 (id=47):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4002)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x8801, 0x800)
r4 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x5, 0x2, r3})

36m22.182551844s ago: executing program 1 (id=48):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x1})
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r4, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r10, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3e)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xaa)

36m19.418097828s ago: executing program 0 (id=49):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000340)={0x30001, 0x0, {[0x401, 0x6, 0xff, 0x0, 0x421f, 0x165f5c55, 0x3, 0x3, 0x800, 0x1, 0x3, 0x6, 0x400, 0x6, 0x1ff, 0xfffffffffffffffa], [0x5a63, 0x400, 0x6, 0x2, 0x4, 0x7ff, 0xd, 0x7, 0x4, 0x5, 0x3, 0x100, 0x1, 0x483, 0x0, 0xffffffff98fbeafe], [0x4, 0xf26, 0x0, 0x79f0, 0xdb, 0xb, 0x80, 0x3, 0x100000001, 0x0, 0x9, 0x4, 0x6, 0x7, 0x5, 0x6e], [0x7, 0x6, 0x10000, 0xffffffffffffffff, 0x2, 0xb58, 0x9, 0x7, 0xfffffffffffffffd, 0x3, 0x8, 0x1, 0x0, 0x9, 0x8000, 0xb1]}})
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b)
r8 = eventfd2(0xd, 0x1)
close(r8)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r8, 0x0, 0x500)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r9, 0x0)
close(r8)

36m13.50834818s ago: executing program 1 (id=50):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0xfffffffffffffffe)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

36m6.350002894s ago: executing program 0 (id=51):
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r1, 0x2000006, 0x8032, 0xffffffffffffffff, 0x0)

36m5.971003039s ago: executing program 1 (id=52):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100050, &(0x7f00000000c0)=0x80003fe})
r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x444802, 0x0)

35m59.16986009s ago: executing program 0 (id=53):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x800454e1, 0x36)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c600, 0xfefefee0}}], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0x0, 0xb4e})
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x3, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x8})
ioctl$KVM_SET_GUEST_DEBUG_arm64(r9, 0x4208ae9b, &(0x7f0000000180)={0x1, 0x0, {[0xffffffffffffffff, 0x2, 0x1, 0xffffffffffffff66, 0x2ab1, 0x6, 0x0, 0x1, 0x8000, 0x9, 0x8000000000000001, 0x100000001, 0xa00000, 0x101, 0x7, 0x3], [0x80, 0x6, 0xb, 0x57, 0x10000, 0x7, 0x6, 0x1, 0x8, 0x0, 0x98e, 0x7, 0x2b, 0x3, 0x2, 0x5], [0x3, 0x10001, 0x2, 0x9, 0xffffffffffffffc0, 0x3, 0x7, 0x1, 0xb, 0x4, 0xa1, 0xe7, 0xf98, 0x1, 0x4, 0x9], [0x4, 0x0, 0x9, 0x0, 0x8, 0x1, 0x2, 0x46e, 0x4, 0x1, 0x998, 0xffffffffffffffff, 0x4, 0x401, 0xfffffffffffff79f, 0x3]}})

35m55.210721992s ago: executing program 1 (id=54):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x7, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x541b, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x400454d0, 0x77)

35m45.903886088s ago: executing program 0 (id=55):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x2})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r8, 0x800454e1, 0x36)

35m43.031734478s ago: executing program 1 (id=56):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0xb, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x7ea, 0xe5, &(0x7f0000000140)=0x4}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x7, 0x2, 0x0})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x10, r3, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, r7, 0x1000000, 0xe637a22295c143f8, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f76000/0x1000)=nil, r7, 0xe, 0x11, 0xffffffffffffffff, 0x20000000)

35m34.519470921s ago: executing program 0 (id=57):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x10000, 0x0, 0x100, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) (async)
r13 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r14, 0x3, 0x11, r13, 0x0)

35m33.0114639s ago: executing program 1 (id=58):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x200000c4, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x10000})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x24c781, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x3c0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)=0x4})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)=@arm64_ccsidr={0x6020000000110008, &(0x7f00000000c0)=0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0xffffffff, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x44c240, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r10, 0x400454d4, 0x2000000000000036)

34m48.440736359s ago: executing program 32 (id=57):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x10000, 0x0, 0x100, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) (async)
r13 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r14, 0x3, 0x11, r13, 0x0)

34m45.051499342s ago: executing program 33 (id=58):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x200000c4, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x10000})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x24c781, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x3c0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)=0x4})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)=@arm64_ccsidr={0x6020000000110008, &(0x7f00000000c0)=0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0xffffffff, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x44c240, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r10, 0x400454d4, 0x2000000000000036)

25m45.512126943s ago: executing program 2 (id=79):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x240802, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f00000000c0)=0x5})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

25m39.912767581s ago: executing program 3 (id=80):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000000)={0x1, 0x5, 0xfec60004, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x4, r0})
syz_kvm_setup_cpu$arm64(r0, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013e304, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x3e}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x3, 0x5, 0x0, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x4, 0x800}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x3, 0x9}}, @irq_setup={0x46, 0x18, {0x1, 0x176}}, @irq_setup={0x46, 0x18, {0x2, 0x2bb}}, @mrs={0xbe, 0x18, {0x603000000013df76}}, @eret={0xe6, 0x18, 0x7497}, @msr={0x14, 0x20, {0x603000000013e703, 0xdc}}, @eret={0xe6, 0x18, 0x9}, @code={0xa, 0x54, {"000028d50044205e00b0200e008008d520738ad20080b0f2210080d2620080d2c30080d2c40080d2020000d4008008d5007008d5000840380000001f007008d5"}}, @code={0xa, 0x6c, {"60ee9ad200e0b8f2410080d2e20080d2830080d2840180d2020000d400c0400d000028d500a4400d00e4207e5f3003d520ab8ad200a0b8f2610080d2220180d2630180d2240080d2020000d4007008d5000c403c007008d5"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x12c}}, @smc={0x1e, 0x40, {0xc4000005, [0x1, 0x259ddea2, 0x23b, 0x7, 0xd704]}}, @memwrite={0x6e, 0x30, @generic={0x25000, 0x2c7, 0x2c, 0xd}}, @mrs={0xbe, 0x18, {0x60300000001399bd}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x3a3}}, @mrs={0xbe, 0x18, {0x603000000013e609}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x86000000, [0x10001, 0x4, 0x3, 0x3, 0x84ac]}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x499, 0x8, 0xa}}, @irq_setup={0x46, 0x18, {0x1, 0x32b}}, @mrs={0xbe, 0x18, {0x6030000000138057}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x1, 0x8000}}], 0x3e8}], 0x1, 0x0, &(0x7f0000000500)=[@featur2={0x1, 0x40}], 0x1)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000580)=@riscv64_v={0x8030000009000012, &(0x7f0000000540)=0x6})
munmap(&(0x7f0000ced000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000dc0000/0x1000)=nil, 0x1000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x240000, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000600))
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000000680)={0xe4, 0x0, 0xd8d0})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000740)=@riscv64_smstateen_csr={0x0, &(0x7f0000000700)=0x4})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f00000007c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000780)=0x981})
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000800)={0xa, [0x8, 0x4, 0xfffffffffffffff7, 0x6, 0x7fff, 0x2000000000000000, 0x5, 0xfd32, 0xfffffffffffffffa, 0x2]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x10b801, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f00000008c0)={{0x2, 0xd000, 0x4, 0x8, 0xdf, 0x5, 0xa, 0x2, 0x7, 0x3, 0x30, 0x5}, {0x3000, 0x10000, 0x8, 0x9, 0x6, 0x5, 0x24, 0x8, 0x55, 0x8, 0xb1, 0x8}, {0x30000, 0xf000, 0xb, 0x6, 0x2, 0x1, 0x7, 0x6f, 0x8, 0x4, 0xf2, 0xe0}, {0x10000, 0x8080000, 0x3, 0x6, 0x5e, 0xe, 0x9, 0x5, 0x6, 0x7, 0x7f, 0x92}, {0x1, 0x80a0000, 0xc, 0x1, 0x4, 0x80, 0x7, 0x7, 0x4, 0x5, 0x10, 0x8b}, {0x8000000, 0x58000, 0xd, 0x4, 0x6, 0x4, 0x3, 0x4, 0x8, 0x4, 0x6, 0x5}, {0xf000, 0x10000, 0xe, 0xf2, 0xf, 0x7, 0x5, 0x0, 0x3, 0x1e, 0x4, 0x2}, {0x13effff, 0x60000, 0x3, 0x0, 0x2a, 0xf, 0xc, 0x3, 0xc, 0x1, 0xee, 0x2}, {0x5000, 0x7}, {0x3000, 0x909}, 0x40000000, 0x0, 0x1000, 0x648224, 0x6, 0xa000, 0xd5e15005, [0xd8, 0x5d, 0x774, 0x9]})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000ec0)={0x0, &(0x7f0000000a00)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x57}}, @smc={0x1e, 0x40, {0x2, [0xeb, 0xa, 0x0, 0x9, 0xe]}}, @hvc={0x32, 0x40, {0x72000013, [0x8767, 0x3, 0x3c, 0x99a, 0x100]}}, @msr={0x14, 0x20, {0x603000000013c661, 0x800}}, @svc={0x122, 0x40, {0x8400000b, [0x6, 0x6, 0x0, 0xffffffff, 0x3ff]}}, @msr={0x14, 0x20, {0x603000000013deb2, 0x200}}, @code={0xa, 0x6c, {"602190d20000b0f2210180d2420080d2e30180d2c40180d2020000d4000008d500dc205e0070000f007008d5007008d5402493d20000b8f2010180d2420180d2a30180d2c40080d2020000d40080800d0000c0ad0000c038"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0xb, 0x0, 0xb}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x2, 0x135}}, @code={0xa, 0x6c, {"000820789f2003d500dc200e000028d5000008d5c0458fd20020b0f2210180d2020080d2c30080d2040180d2020000d4007008d50040e21ea0279ad200a0b8f2210180d2c20180d2830180d2e40080d2020000d4000008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x3407166c, 0x8}}, @hvc={0x32, 0x40, {0xc4000010, [0x1, 0x2, 0x4, 0x7, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x1, 0x1, 0x3, 0x2}}, @hvc={0x32, 0x40, {0x80008000, [0x2, 0x7b, 0x800, 0x4, 0x3]}}, @eret={0xe6, 0x18, 0x4}, @code={0xa, 0x9c, {"20ab86d200e0b0f2e10080d2e20180d2c30180d2240180d2020000d4406b94d20060b8f2a10080d2220180d2e30180d2440180d2020000d400e4202e007008d5c07188d200c0b8f2010180d2020180d2c30080d2640080d2020000d4000c201e007008d5000028d5007008d5009583d200e0b8f2010080d2220180d2230180d2240080d2020000d4"}}, @svc={0x122, 0x40, {0x84000009, [0x1, 0x6, 0x1ff, 0x401, 0x7]}}, @uexit={0x0, 0x18}, @mrs={0xbe, 0x18, {0x603000000013dce3}}, @svc={0x122, 0x40, {0xc4000014, [0x6, 0x8000000000000001, 0x8000000000000000, 0xcbb, 0x6]}}], 0x4ac}, &(0x7f0000000f00)=[@featur1={0x1, 0x64}], 0x1)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a)
ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000f40)=@x86={0x1e, 0x9, 0x3, 0x0, 0x1000, 0x2, 0x6, 0x5, 0x0, 0x6, 0x6, 0x80, 0x0, 0x4, 0x55, 0x1, 0x12, 0x2, 0xf7, '\x00', 0x81})
ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f0000000f80))
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000001040)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f0000001000)=0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000001080)={0x10201, 0x1, 0x4000, 0x1000, &(0x7f0000e01000/0x1000)=nil, 0x63a7, r0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x840, 0x0)
ioctl$KVM_GET_REGS(r6, 0x8360ae81, &(0x7f0000001180))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001240)={0x10002, 0x1, 0x60000, 0x1000, &(0x7f0000f5f000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)

25m27.929862307s ago: executing program 2 (id=81):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x800})
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r5, 0x1})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r5, 0x3})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r5, 0xf})
ioctl$KVM_CREATE_VM(r2, 0x801c581f, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x600000e, 0x110, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000d3a000/0x3000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bc2000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)

25m25.399437269s ago: executing program 3 (id=82):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000080)=0x12})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013e665, &(0x7f0000000000)=0x10000000d})

25m13.462853822s ago: executing program 3 (id=83):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x3000009, 0x12, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000600)="1832b80cc249b1de3f994786e804928e97e3ec211e5900864994397a5b5882ebbd7f1ca1ec3df25eeb01812a8b2709ce2628a212bce633f2f8c73cb1a7732c54ddd2f4e547680e96", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x2, 0x0, 0x7, 0xce7b, 0x2}}, @mrs={0xbe, 0x18}, @memwrite={0x6e, 0x30, @generic={0x26000, 0x80e, 0x960, 0xa}}, @svc={0x122, 0x40, {0x400, [0x5, 0x8, 0xfffffffffffffff8, 0x9, 0xd61e]}}, @code={0xa, 0x6c, {"0000c093000008d5008008d5007008d5c00080d20040b8f2c10080d2c20180d2630080d2040080d2020000d4008008d5007008d5007008d50068000e805996d20000b0f2e10180d2020080d2030080d2440180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x401, 0x1}}, @uexit={0x0, 0x18, 0x9}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0xd, 0x0, 0x5d8, 0x4}}, @smc={0x1e, 0x40, {0x80000002, [0x101, 0x8, 0x1c6f, 0x1, 0x8]}}, @memwrite={0x6e, 0x30, @generic={0x70000, 0xcdc, 0x0, 0xd}}, @hvc={0x32, 0x40, {0x80000001, [0x80000000, 0x7aef, 0x59, 0x6, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0x8, 0x6, 0xd9, 0x3}}, @svc={0x122, 0x40, {0x3f000000, [0x4, 0x9, 0xffffffffffff16a7, 0x3, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0x0, 0x4, 0xffff}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x2, 0x800, 0x5, 0x2}}, @svc={0x122, 0x40, {0xc5000021, [0x2, 0xc, 0x7ff, 0x7, 0x101]}}, @irq_setup={0x46, 0x18, {0x0, 0x275}}, @msr={0x14, 0x20, {0x5f16, 0xe}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x114}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x90}}, @eret={0xe6, 0x18, 0x7ff}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x272}}, @code={0xa, 0x84, {"008008d5000cc078205d8fd200a0b8f2c10180d2020180d2630180d2840080d2020000d400fc200e007008d5007008d580d380d20000b0f2410080d2420080d2e30180d2440180d2020000d400aa84d20040b8f2210080d2220180d2230180d2040180d2020000d400a49f0d0094006f"}}, @msr={0x14, 0x20, {0x603000000013c00e, 0xfffffffffffeffff}}, @irq_setup={0x46, 0x18, {0x3, 0x1bb}}, @msr={0x14, 0x20, {0x603000000013ff12, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0xd, 0xa, 0x8}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x2d9}}], 0x540}, &(0x7f00000005c0)=[@featur1={0x1, 0x1}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r4, 0x3, 0x11, r5, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0)

25m9.702494571s ago: executing program 2 (id=84):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r1, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r3, 0x2000009, 0x213011, r1, 0x0) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

25m0.147969553s ago: executing program 2 (id=85):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x1, 0x200, 0x0}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
close(r4) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000000)) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0)

24m55.200161815s ago: executing program 3 (id=86):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x801c581f, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bc2000/0x400000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bc2000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) (async)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18) (async)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x39)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec7000/0x3000)=nil, 0x930, 0x500000f, 0x30, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x806, 0x8, 0x102}}], 0x68}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x806, 0x8, 0x102}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x220)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)

24m45.458711209s ago: executing program 2 (id=87):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000300), 0x301003, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x15)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000002c0)=0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x0, 0x1003, 0x1}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000000), 0x101682, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a2a000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x30401, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
r14 = eventfd2(0x0, 0x0)
close(r14)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000015000/0x4000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0)

24m34.433769122s ago: executing program 3 (id=88):
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) (async)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x2000000000001}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f00000001c0)={0xe4, 0x0, 0x3})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async)
r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) (async, rerun: 64)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000280)=@riscv64_aia_csr={0x8030000003010001, &(0x7f0000000140)=0x54}) (async)
r14 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000100)={0x4, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000240)=0xffffffff}) (async)
ioctl$KVM_CREATE_VM(r11, 0x40305839, 0x4000000000000019)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

24m27.070727812s ago: executing program 2 (id=89):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7})
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x6000})
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x8000000000000000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c521}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

24m18.608624009s ago: executing program 3 (id=90):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3e)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xffffffffffffff59)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x100)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x100)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0x401c5820, 0x8000000000000001)
close(r10)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_GET_SREGS(r12, 0x8000ae83, &(0x7f0000000340))
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

23m39.51848432s ago: executing program 34 (id=89):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7})
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x6000})
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x8000000000000000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c521}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

23m30.128223135s ago: executing program 35 (id=90):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3e)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xffffffffffffff59)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x100)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x100)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0x401c5820, 0x8000000000000001)
close(r10)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_GET_SREGS(r12, 0x8000ae83, &(0x7f0000000340))
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

14m35.738227416s ago: executing program 5 (id=96):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0xa6c96e5b86d508d5, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a67000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c807})
ioctl$KVM_CREATE_VM(r0, 0xc0045878, 0x20000000)

14m29.021628714s ago: executing program 4 (id=97):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0x19}], 0x1)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce4, &(0x7f0000000040)=0x2})
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000180), 0x40, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x652000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_vgic_v3_setup(r8, 0x4, 0x100)
ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000040)={0x5, 0xde})
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xeeee0000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfe000/0x400000)=nil)
write$eventfd(r12, &(0x7f00000001c0)=0x7ffffff, 0xe80)

14m22.202610698s ago: executing program 5 (id=98):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14m5.720479084s ago: executing program 5 (id=99):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161742, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000021)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x101800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0xffffffffffbffffc, 0x120)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x3000005, 0x100010, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x10ba00, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r6, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r7 = eventfd2(0x4, 0x0)
write$eventfd(r7, &(0x7f0000000000)=0xb, 0x8)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x67a040, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r10, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, r4, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

14m3.720399449s ago: executing program 4 (id=100):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil)
openat$kvm(0x0, &(0x7f00000001c0), 0x200000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x240000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x3})
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0xc5000020, [0x6, 0x3, 0x1, 0x711ec83f, 0x8000]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x7ff, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013803d}}, @smc={0x1e, 0x40, {0x84000010, [0x7fffffffffffffff, 0xfffffffffffffff7, 0x7, 0x5, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x5}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x8, 0x4, 0x8, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xa, 0x1, 0x0, 0x4}}], 0x148}, &(0x7f0000000480)=[@featur1={0x1, 0x43}], 0x1)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

13m45.689901012s ago: executing program 5 (id=101):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000000)=0xffffffffffff7fff})

13m44.303401458s ago: executing program 4 (id=102):
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x24000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffdffffffffff)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x7, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r6 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r6, 0x5, 0x2, r6})
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xfffffffffffffffd)
write$eventfd(r6, &(0x7f0000000080)=0x7, 0x8)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000000c0)={0x8080000, 0x104000})

13m31.598420449s ago: executing program 4 (id=103):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x801c581f, 0x5)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x222000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x5, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x5, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13m29.564257776s ago: executing program 5 (id=104):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000280)=0x7fffffff})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_bitmap={0x6070000000160002, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000100)={0x10201, 0x3c0, 0x400, &(0x7f00000005c0)=[0x5, 0x80000000, 0xde3, 0x8, 0xfff, 0x9, 0x0, 0x5, 0x7, 0x4, 0x3, 0xfffffffffffff001, 0x5b1, 0x55cf, 0x1, 0x43667e12, 0x4, 0x8, 0xffffffff, 0x5, 0x4, 0x1ff, 0x6, 0xffffffffffffffff, 0x7fff, 0x3, 0x4, 0x674be5dd, 0xff, 0x8, 0x2, 0x200, 0x7, 0x6, 0x1, 0xffffffffffffff81, 0x4, 0x8001, 0x2, 0xb, 0x2, 0x7fff, 0x8, 0x5, 0xfffffffffffffffd, 0x5, 0x200, 0x5, 0x4, 0x2, 0x1, 0x3, 0xf, 0x200, 0x9, 0xfffffffffffffffc, 0x2, 0x2, 0x7, 0x9, 0x284f, 0xfffffffffffffff4, 0xc1, 0x3c0000, 0x100, 0xfffffffffffffc01, 0x4, 0x2, 0x100000000, 0x9, 0xd, 0x100, 0x9, 0x8, 0xffffffffffffffff, 0x3, 0x7, 0x400, 0xf974, 0x2, 0xfb1, 0x9, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x8, 0xb, 0x7, 0xc, 0xc, 0x2, 0xfffffffffffffffb, 0x8, 0x1, 0x6, 0x8, 0x3, 0x7, 0x4, 0x6, 0xffff, 0x8001, 0x8, 0x6, 0x5, 0x0, 0x5, 0x0, 0x6, 0x5, 0x1, 0x400, 0x6, 0xb5, 0x9, 0x0, 0x8, 0xfffffffffffffffd, 0x1, 0x67b, 0x2, 0x4, 0x6, 0x6, 0xfff, 0x2, 0x7]})
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140000, &(0x7f0000000040)=0x10000})
r14 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0x80111500, 0x20000000)
write$eventfd(r16, &(0x7f0000000040), 0x8)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f)
ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

13m11.345514071s ago: executing program 4 (id=105):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27)
syz_kvm_vgic_v3_setup(r3, 0x4, 0x2c0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r10, 0x3, 0x40b2811, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0x80811501, 0x20000000)
r12 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)

13m4.615005491s ago: executing program 5 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f0000efa000/0x3000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd940000c2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c8ad3e5952305abf0", 0x0, 0x48)
r8 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x0, 0x10, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_add_vcpu$arm64(r2, 0x0, 0x0, 0x50b1fa0e09b82e23)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e70000000000000000000000000000000100", 0x0, 0xfffffffffffffc4c)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_GET_API_VERSION(r12, 0xae00, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x4})
r13 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x4000000, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000002c0)={0x1ff, 0x7ff})

12m49.923018126s ago: executing program 4 (id=107):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x2})
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x1000000, 0x80010, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26)
r7 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000000c0)={0xf4, "9e016d005ced24d25bc9a9a723a5ae4fbae05edb1b78d7138013166702c9d923bb394938cd55ed831787b4a5415e805af1c8102c7e7ea5d88112dc83c04a0bf9f7611470d9ebb5ec2afd008052bb4258f7a049fc970ea7b7bea904df0a9da6092bc9a33e9d3b851f0d43e83d3cd1dd07f2a1793b83f5ad7ad61602b2ed64176f422541e11d749bcb5ad19156f7f095dec6a14532b114005bf2e5a8df757f0df385d4ed54a44a8cdb78c57ee5978259d7cd67b84608d3721ea0dc03b7d1410bbf9e9302f73531198c3e3d00374f8621a7b8da9ec0b1c9b2cda7610d12c3e3b8e92aea380e398c0c0a75b3b7f838c115a8270b4a3f"})
syz_kvm_setup_cpu$arm64(r6, r3, &(0x7f00005e2000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

12m16.789875152s ago: executing program 36 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f0000efa000/0x3000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd940000c2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c8ad3e5952305abf0", 0x0, 0x48)
r8 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x0, 0x10, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_add_vcpu$arm64(r2, 0x0, 0x0, 0x50b1fa0e09b82e23)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e70000000000000000000000000000000100", 0x0, 0xfffffffffffffc4c)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
ioctl$KVM_GET_API_VERSION(r12, 0xae00, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x4})
r13 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x4000000, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000002c0)={0x1ff, 0x7ff})

11m59.907663765s ago: executing program 37 (id=107):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x2})
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x1000000, 0x80010, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26)
r7 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000000c0)={0xf4, "9e016d005ced24d25bc9a9a723a5ae4fbae05edb1b78d7138013166702c9d923bb394938cd55ed831787b4a5415e805af1c8102c7e7ea5d88112dc83c04a0bf9f7611470d9ebb5ec2afd008052bb4258f7a049fc970ea7b7bea904df0a9da6092bc9a33e9d3b851f0d43e83d3cd1dd07f2a1793b83f5ad7ad61602b2ed64176f422541e11d749bcb5ad19156f7f095dec6a14532b114005bf2e5a8df757f0df385d4ed54a44a8cdb78c57ee5978259d7cd67b84608d3721ea0dc03b7d1410bbf9e9302f73531198c3e3d00374f8621a7b8da9ec0b1c9b2cda7610d12c3e3b8e92aea380e398c0c0a75b3b7f838c115a8270b4a3f"})
syz_kvm_setup_cpu$arm64(r6, r3, &(0x7f00005e2000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

3m13.081319304s ago: executing program 7 (id=109):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a5a000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0xffffffff, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2m58.424634302s ago: executing program 7 (id=110):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013df61}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m53.805829831s ago: executing program 6 (id=111):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x8, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r10, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r11, 0x3000003, 0x2011, r10, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f00000002c0)={0x1ff, 0x1, 0xfec00000, 0x2000, &(0x7f0000c0f000/0x2000)=nil, 0x23, r10})
r12 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000040)=@arm64_sys={0x603000000013e000, 0x0})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8})
r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a00ed})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0xffff7fff, 0x100000000009, 0x0})

2m29.441603997s ago: executing program 7 (id=112):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = syz_kvm_vgic_v3_setup(r4, 0x4, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x800000000208, &(0x7f00000004c0)=0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r8, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bfe000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0xffffffffffffffff, 0xb}}], 0x58}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r8, 0x3000004, 0x44030, r5, 0x0)

2m20.389129764s ago: executing program 6 (id=113):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e22ffff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)

2m3.286230475s ago: executing program 7 (id=114):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408)
ioctl$KVM_CHECK_EXTENSION(r4, 0x541b, 0x20000000000000ac)

1m49.683154048s ago: executing program 6 (id=115):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x7, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x8, 0x80080, 0x0}) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x8, 0x80080, 0x0})
r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c00d, 0x8008}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c01e, 0xc59}}, @its_setup={0x82, 0x28, {0x2, 0x3}}, @msr={0x14, 0x20, {0x603000000013c4cc, 0x8000}}], 0xe8}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r11, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000000)=0x16})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, 0xffffffffffffffff) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r13, 0x4018aee1, 0xffffffffffffffff)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) (async)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r15, 0x1, 0x100)
r17 = eventfd2(0x4, 0x80801)
ioctl$KVM_IRQFD(r15, 0x4020ae76, &(0x7f0000000000)={r17, 0x6, 0x2, r16})
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1m44.590583847s ago: executing program 7 (id=116):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r6, 0x8})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r6, 0x2})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r6, 0x2})
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0x8000})
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000001c0)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xfffffffffffffffc})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = eventfd2(0x2, 0x80000)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m26.789699442s ago: executing program 6 (id=117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x0, 0xffe})
ioctl$KVM_CHECK_EXTENSION(r0, 0x4020940d, 0xfffffffffffff4c2)

1m15.099537574s ago: executing program 7 (id=118):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
write$eventfd(r1, &(0x7f0000000000), 0xfffffdef)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x201, 0xa}})
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000004c0)}, &(0x7f00000000c0)=[@featur2], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34)
r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2})
r15 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @smc={0x1e, 0x40, {0x84000010, [0x3, 0x2, 0x7fff, 0x5, 0x5]}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x80}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r18 = syz_kvm_vgic_v3_setup(r17, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r18, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000000c0)=0x1})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

1m9.220835623s ago: executing program 6 (id=119):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x44e})

48.854623619s ago: executing program 6 (id=120):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109682, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0xe)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r10, 0x1, 0x12, r7, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r12, 0x1000001, 0x12, r7, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r6, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r13, 0x3, 0x11, r11, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

26.221732517s ago: executing program 38 (id=118):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
write$eventfd(r1, &(0x7f0000000000), 0xfffffdef)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x201, 0xa}})
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000004c0)}, &(0x7f00000000c0)=[@featur2], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34)
r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2})
r15 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @smc={0x1e, 0x40, {0x84000010, [0x3, 0x2, 0x7fff, 0x5, 0x5]}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x80}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r18 = syz_kvm_vgic_v3_setup(r17, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r18, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000000c0)=0x1})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

0s ago: executing program 39 (id=120):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109682, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0xe)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r10, 0x1, 0x12, r7, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r12, 0x1000001, 0x12, r7, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r6, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r13, 0x3, 0x11, r11, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

kernel console output (not intermixed with test programs):

[  419.027441][ T3171] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.991441][ T3171] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:6285' (ED25519) to the list of known hosts.
[  649.642640][   T25] audit: type=1400 audit(648.820:60): avc:  denied  { name_bind } for  pid=3326 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  651.691137][   T25] audit: type=1400 audit(650.870:61): avc:  denied  { execute } for  pid=3327 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  651.744525][   T25] audit: type=1400 audit(650.890:62): avc:  denied  { execute_no_trans } for  pid=3327 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  678.449064][   T25] audit: type=1400 audit(677.630:63): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  678.507215][   T25] audit: type=1400 audit(677.690:64): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  678.599855][ T3327] cgroup: Unknown subsys name 'net'
[  678.670657][   T25] audit: type=1400 audit(677.850:65): avc:  denied  { unmount } for  pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  679.145153][ T3327] cgroup: Unknown subsys name 'cpuset'
[  679.279391][ T3327] cgroup: Unknown subsys name 'rlimit'
[  680.299423][   T25] audit: type=1400 audit(679.480:66): avc:  denied  { setattr } for  pid=3327 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  680.327522][   T25] audit: type=1400 audit(679.500:67): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  680.352080][   T25] audit: type=1400 audit(679.530:68): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  681.459237][ T3331] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  681.480751][   T25] audit: type=1400 audit(680.660:69): avc:  denied  { relabelto } for  pid=3331 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  681.509911][   T25] audit: type=1400 audit(680.680:70): avc:  denied  { write } for  pid=3331 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  681.710020][   T25] audit: type=1400 audit(680.890:71): avc:  denied  { read } for  pid=3327 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  681.730831][   T25] audit: type=1400 audit(680.900:72): avc:  denied  { open } for  pid=3327 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  681.779689][ T3327] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  741.541825][   T25] audit: type=1400 audit(740.720:73): avc:  denied  { execmem } for  pid=3332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  745.592946][   T25] audit: type=1400 audit(744.770:74): avc:  denied  { read } for  pid=3334 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  745.630704][   T25] audit: type=1400 audit(744.780:75): avc:  denied  { open } for  pid=3335 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  745.697224][   T25] audit: type=1400 audit(744.860:76): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  745.953102][   T25] audit: type=1400 audit(745.130:77): avc:  denied  { module_request } for  pid=3334 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  747.426503][   T25] audit: type=1400 audit(746.580:78): avc:  denied  { sys_module } for  pid=3335 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  779.960851][ T3334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.051873][ T3335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.139967][ T3334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.235582][ T3335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  792.667114][ T3334] hsr_slave_0: entered promiscuous mode
[  792.697190][ T3334] hsr_slave_1: entered promiscuous mode
[  793.561244][ T3335] hsr_slave_0: entered promiscuous mode
[  793.637942][ T3335] hsr_slave_1: entered promiscuous mode
[  793.679671][ T3335] debugfs: 'hsr0' already exists in 'hsr'
[  793.694809][ T3335] Cannot create hsr debugfs directory
[  799.986635][   T25] audit: type=1400 audit(799.160:79): avc:  denied  { create } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  800.041853][   T25] audit: type=1400 audit(799.220:80): avc:  denied  { write } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  800.111857][   T25] audit: type=1400 audit(799.290:81): avc:  denied  { read } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  800.251691][ T3334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  800.510282][ T3334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  800.687866][ T3334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  801.149108][ T3334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  802.813106][ T3335] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  803.000778][ T3335] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  803.179695][ T3335] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  803.406754][ T3335] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  816.409256][ T3334] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.381824][ T3335] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.022599][ T3334] veth0_vlan: entered promiscuous mode
[  877.548696][ T3334] veth1_vlan: entered promiscuous mode
[  880.266466][ T3335] veth0_vlan: entered promiscuous mode
[  881.307608][ T3334] veth0_macvtap: entered promiscuous mode
[  881.478205][ T3335] veth1_vlan: entered promiscuous mode
[  881.927216][ T3334] veth1_macvtap: entered promiscuous mode
[  885.907621][ T3335] veth0_macvtap: entered promiscuous mode
[  886.148452][   T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.179969][   T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  886.200007][   T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  886.352478][   T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.776145][ T3335] veth1_macvtap: entered promiscuous mode
[  889.954739][   T25] audit: type=1400 audit(889.120:82): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  890.307866][   T25] audit: type=1400 audit(889.490:83): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.JhWMfL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  890.597031][   T25] audit: type=1400 audit(889.770:84): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  891.134731][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.188199][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.210494][   T25] audit: type=1400 audit(890.380:85): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.JhWMfL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  891.334844][ T3443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.339322][ T3443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.577452][   T25] audit: type=1400 audit(890.690:86): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.JhWMfL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  892.621872][   T25] audit: type=1400 audit(891.800:87): avc:  denied  { unmount } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  893.040613][   T25] audit: type=1400 audit(892.210:88): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  893.145775][   T25] audit: type=1400 audit(892.310:89): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="gadgetfs" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  893.811891][   T25] audit: type=1400 audit(892.990:90): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  894.149403][   T25] audit: type=1400 audit(893.330:91): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  895.779506][ T3334] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  897.531484][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  897.569667][   T25] audit: type=1400 audit(896.710:93): avc:  denied  { read write } for  pid=3334 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  897.626448][   T25] audit: type=1400 audit(896.780:94): avc:  denied  { open } for  pid=3334 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  897.704442][   T25] audit: type=1400 audit(896.850:95): avc:  denied  { ioctl } for  pid=3334 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  908.327835][   T25] audit: type=1400 audit(907.510:96): avc:  denied  { read } for  pid=3492 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  908.389689][   T25] audit: type=1400 audit(907.570:97): avc:  denied  { open } for  pid=3492 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  908.745892][   T25] audit: type=1400 audit(907.900:98): avc:  denied  { ioctl } for  pid=3492 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  912.460023][   T25] audit: type=1400 audit(911.640:99): avc:  denied  { execute } for  pid=3494 comm="syz.1.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  913.811483][   T25] audit: type=1400 audit(912.990:100): avc:  denied  { write } for  pid=3494 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  925.962268][   T25] audit: type=1400 audit(925.090:101): avc:  denied  { ioctl } for  pid=3506 comm="syz.0.5" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  987.929210][   T25] audit: type=1400 audit(987.110:102): avc:  denied  { append } for  pid=3541 comm="syz.1.16" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  988.572584][   T25] audit: type=1400 audit(987.750:103): avc:  denied  { create } for  pid=3541 comm="syz.1.16" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  988.698018][   T25] audit: type=1400 audit(987.850:104): avc:  denied  { map } for  pid=3541 comm="syz.1.16" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  988.767080][   T25] audit: type=1400 audit(987.940:105): avc:  denied  { read } for  pid=3541 comm="syz.1.16" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1110.061393][   T25] audit: type=1400 audit(1109.240:106): avc:  denied  { map } for  pid=3614 comm="syz.0.37" path="pipe:[2741]" dev="pipefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1110.125139][   T25] audit: type=1400 audit(1109.270:107): avc:  denied  { execute } for  pid=3614 comm="syz.0.37" path="pipe:[2741]" dev="pipefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1144.308777][   T25] audit: type=1400 audit(1143.410:108): avc:  denied  { setattr } for  pid=3631 comm="syz.0.43" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1177.112372][   T25] audit: type=1400 audit(1176.290:109): avc:  denied  { execute } for  pid=3648 comm="syz.0.49" path=2F32332FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1334.748447][ T3682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1335.157452][ T3682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1338.376292][ T3685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1338.648270][ T3685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1360.060967][ T3682] hsr_slave_0: entered promiscuous mode
[ 1360.172368][ T3682] hsr_slave_1: entered promiscuous mode
[ 1360.248301][ T3682] debugfs: 'hsr0' already exists in 'hsr'
[ 1360.284529][ T3682] Cannot create hsr debugfs directory
[ 1366.110597][ T3685] hsr_slave_0: entered promiscuous mode
[ 1366.216422][ T3685] hsr_slave_1: entered promiscuous mode
[ 1366.267379][ T3685] debugfs: 'hsr0' already exists in 'hsr'
[ 1366.270506][ T3685] Cannot create hsr debugfs directory
[ 1385.365335][ T3682] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1385.969551][ T3682] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1386.802901][ T3682] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1387.985286][ T3682] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1392.567447][ T3685] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1393.130816][ T3685] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1393.647184][ T3685] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1394.105421][ T3685] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1425.906379][ T3762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.008580][ T3762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1429.885473][ T3762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.688290][ T3762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1451.775550][ T3762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1452.012781][ T3762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1452.187796][ T3762] bond0 (unregistering): Released all slaves
[ 1453.886415][ T3762] hsr_slave_0: left promiscuous mode
[ 1454.008710][ T3762] hsr_slave_1: left promiscuous mode
[ 1454.644791][ T3762] veth1_macvtap: left promiscuous mode
[ 1454.647964][ T3762] veth0_macvtap: left promiscuous mode
[ 1454.664021][ T3762] veth1_vlan: left promiscuous mode
[ 1454.700155][ T3762] veth0_vlan: left promiscuous mode
[ 1475.421546][ T3685] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1475.719042][ T3682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1479.592486][ T3762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1481.505909][ T3762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1483.369567][ T3762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.069080][ T3762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.705649][ T3762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1508.272318][ T3762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1508.710413][ T3762] bond0 (unregistering): Released all slaves
[ 1511.017668][ T3762] hsr_slave_0: left promiscuous mode
[ 1511.135827][ T3762] hsr_slave_1: left promiscuous mode
[ 1512.222625][ T3762] veth1_macvtap: left promiscuous mode
[ 1512.225978][ T3762] veth0_macvtap: left promiscuous mode
[ 1512.250426][ T3762] veth1_vlan: left promiscuous mode
[ 1512.276299][ T3762] veth0_vlan: left promiscuous mode
[ 1610.658132][ T3685] veth0_vlan: entered promiscuous mode
[ 1612.159773][ T3682] veth0_vlan: entered promiscuous mode
[ 1612.679337][ T3685] veth1_vlan: entered promiscuous mode
[ 1614.347197][ T3682] veth1_vlan: entered promiscuous mode
[ 1618.146595][ T3685] veth0_macvtap: entered promiscuous mode
[ 1619.472245][ T3685] veth1_macvtap: entered promiscuous mode
[ 1619.747004][ T3682] veth0_macvtap: entered promiscuous mode
[ 1620.664083][ T3682] veth1_macvtap: entered promiscuous mode
[ 1625.307898][ T3786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.586100][ T3786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.861470][ T3786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.871841][ T3786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.912173][ T3786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.965120][   T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1627.009863][   T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1627.090983][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2048.841884][ T4068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2049.392886][ T4068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2062.167020][ T4075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2062.732732][ T4075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2098.985840][ T4068] hsr_slave_0: entered promiscuous mode
[ 2099.098319][ T4068] hsr_slave_1: entered promiscuous mode
[ 2106.899339][   T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2109.312863][   T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2111.689107][   T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2113.596408][   T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2118.356894][ T4075] hsr_slave_0: entered promiscuous mode
[ 2118.440988][ T4075] hsr_slave_1: entered promiscuous mode
[ 2118.558499][ T4075] debugfs: 'hsr0' already exists in 'hsr'
[ 2118.586347][ T4075] Cannot create hsr debugfs directory
[ 2137.972423][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2138.110911][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2138.212818][   T52] bond0 (unregistering): Released all slaves
[ 2139.663176][   T52] hsr_slave_0: left promiscuous mode
[ 2139.706529][   T52] hsr_slave_1: left promiscuous mode
[ 2140.000764][   T52] veth1_macvtap: left promiscuous mode
[ 2140.012896][   T52] veth0_macvtap: left promiscuous mode
[ 2140.018598][   T52] veth1_vlan: left promiscuous mode
[ 2140.034852][   T52] veth0_vlan: left promiscuous mode
[ 2174.648325][ T4068] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2175.335826][ T4068] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2176.008747][ T4068] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2177.478965][   T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2177.821121][ T4068] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2179.601372][   T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2181.421170][   T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2183.049630][   T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2185.595880][ T4075] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2186.976532][ T4075] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2187.509405][ T4075] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2188.649691][ T4075] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2205.239663][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2206.052995][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2206.596601][   T52] bond0 (unregistering): Released all slaves
[ 2209.139237][   T52] hsr_slave_0: left promiscuous mode
[ 2209.288234][   T52] hsr_slave_1: left promiscuous mode
[ 2210.296599][   T52] veth1_macvtap: left promiscuous mode
[ 2210.315511][   T52] veth0_macvtap: left promiscuous mode
[ 2210.328406][   T52] veth1_vlan: left promiscuous mode
[ 2210.330020][   T52] veth0_vlan: left promiscuous mode
[ 2251.749473][ T4068] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2265.581577][ T4075] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2391.835862][ T4068] veth0_vlan: entered promiscuous mode
[ 2393.068338][ T4068] veth1_vlan: entered promiscuous mode
[ 2397.098640][ T4068] veth0_macvtap: entered promiscuous mode
[ 2397.926548][ T4068] veth1_macvtap: entered promiscuous mode
[ 2402.200302][ T4206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.201572][ T4206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.223094][ T4206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.276391][ T4206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2411.527758][ T4075] veth0_vlan: entered promiscuous mode
[ 2413.638398][ T4075] veth1_vlan: entered promiscuous mode
[ 2418.518658][ T4075] veth0_macvtap: entered promiscuous mode
[ 2419.700502][ T4075] veth1_macvtap: entered promiscuous mode
[ 2424.712724][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.805498][ T4203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.955474][ T4203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.969919][ T4174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2512.512929][   T25] audit: type=1400 audit(2511.620:110): avc:  denied  { map } for  pid=4361 comm="syz.5.99" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2512.596043][   T25] audit: type=1400 audit(2511.760:111): avc:  denied  { execute } for  pid=4361 comm="syz.5.99" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2669.462455][ T3787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2671.880192][ T3787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2674.068420][ T3787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2676.341000][ T3787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2707.551482][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2707.915737][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2708.167308][ T3787] bond0 (unregistering): Released all slaves
[ 2709.638526][ T3787] hsr_slave_0: left promiscuous mode
[ 2709.755772][ T3787] hsr_slave_1: left promiscuous mode
[ 2710.455166][ T3787] veth1_macvtap: left promiscuous mode
[ 2710.458657][ T3787] veth0_macvtap: left promiscuous mode
[ 2710.478402][ T3787] veth1_vlan: left promiscuous mode
[ 2710.491108][ T3787] veth0_vlan: left promiscuous mode
[ 2745.438600][ T3787] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2747.291193][ T3787] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2749.206586][ T3787] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2751.565305][ T3787] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2778.010202][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2778.266537][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2778.481784][ T3787] bond0 (unregistering): Released all slaves
[ 2782.276215][ T3787] hsr_slave_0: left promiscuous mode
[ 2782.505511][ T3787] hsr_slave_1: left promiscuous mode
[ 2783.881932][ T3787] veth1_macvtap: left promiscuous mode
[ 2783.896126][ T3787] veth0_macvtap: left promiscuous mode
[ 2783.911501][ T3787] veth1_vlan: left promiscuous mode
[ 2783.959383][ T3787] veth0_vlan: left promiscuous mode
[ 2829.209379][ T4409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2829.634855][ T4409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2836.219573][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2836.568380][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2862.007505][ T4409] hsr_slave_0: entered promiscuous mode
[ 2862.138538][ T4409] hsr_slave_1: entered promiscuous mode
[ 2868.881466][ T4421] hsr_slave_0: entered promiscuous mode
[ 2868.941220][ T4421] hsr_slave_1: entered promiscuous mode
[ 2868.990298][ T4421] debugfs: 'hsr0' already exists in 'hsr'
[ 2869.016819][ T4421] Cannot create hsr debugfs directory
[ 2892.230810][ T4409] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2893.449483][ T4409] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2894.397352][ T4409] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2895.835327][ T4409] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2901.130357][ T4421] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2901.612480][ T4421] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2902.388755][ T4421] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2903.069904][ T4421] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2936.400511][ T4409] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2943.431549][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3112.089842][ T4409] veth0_vlan: entered promiscuous mode
[ 3113.817799][ T4409] veth1_vlan: entered promiscuous mode
[ 3119.508402][ T4409] veth0_macvtap: entered promiscuous mode
[ 3121.707367][ T4409] veth1_macvtap: entered promiscuous mode
[ 3122.511209][ T4421] veth0_vlan: entered promiscuous mode
[ 3125.284143][ T4421] veth1_vlan: entered promiscuous mode
[ 3129.268546][ T4203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3129.270086][ T4203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3129.346542][ T4203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3129.645185][ T3426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3134.399896][ T4421] veth0_macvtap: entered promiscuous mode
[ 3136.067148][ T4421] veth1_macvtap: entered promiscuous mode
[ 3139.819882][   T25] audit: type=1400 audit(3139.000:112): avc:  denied  { unmount } for  pid=4409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 3142.977121][ T3762] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3142.995978][ T3762] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3142.999575][ T3762] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3143.000445][ T3762] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3494.959374][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3497.887405][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3526.930693][ T4750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3529.403090][ T4750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3564.844746][ T4739] hsr_slave_0: entered promiscuous mode
[ 3565.028490][ T4739] hsr_slave_1: entered promiscuous mode
[ 3565.151609][ T4739] debugfs: 'hsr0' already exists in 'hsr'
[ 3565.221568][ T4739] Cannot create hsr debugfs directory
[ 3603.953217][ T4750] hsr_slave_0: entered promiscuous mode
[ 3604.260433][ T4750] hsr_slave_1: entered promiscuous mode
[ 3604.468337][ T4750] debugfs: 'hsr0' already exists in 'hsr'
[ 3604.497435][ T4750] Cannot create hsr debugfs directory
[ 3615.273152][ T4739] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3618.566096][ T4739] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3621.740032][ T4739] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3624.106485][ T4739] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3654.008726][ T4750] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3655.067208][ T4750] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3656.138524][ T4750] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3657.177509][ T4750] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3697.846407][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3720.718505][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3749.796115][   T27] INFO: task syz.6.120:4730 blocked for more than 430 seconds.
[ 3749.846744][   T27]       Not tainted syzkaller #0
[ 3749.874476][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3749.878043][   T27] task:syz.6.120       state:D stack:0     pid:4730  tgid:4730  ppid:4409   task_flags:0x400040 flags:0x00000011
[ 3749.908252][   T27] Call trace:
[ 3749.908777][   T27]  __switch_to+0x584/0xb00 (T)
[ 3749.910913][   T27]  __schedule+0x200c/0x3428
[ 3749.911534][   T27]  schedule+0xac/0x27c
[ 3749.912011][   T27]  schedule_timeout+0x68/0x1ec
[ 3749.912553][   T27]  do_wait_for_common+0x28c/0x440
[ 3749.913012][   T27]  wait_for_completion+0x44/0x5c
[ 3750.096166][   T27]  __synchronize_srcu+0x2a4/0x320
[ 3750.096908][   T27]  synchronize_srcu+0x3d0/0x4f8
[ 3750.097488][   T27]  mmu_notifier_unregister+0x320/0x428
[ 3750.098002][   T27]  kvm_put_kvm+0x698/0xbe0
[ 3750.098444][   T27]  kvm_vm_release+0x58/0x78
[ 3750.098904][   T27]  __fput+0x4ac/0x978
[ 3750.099382][   T27]  ____fput+0x20/0x58
[ 3750.099830][   T27]  task_work_run+0x1b8/0x250
[ 3750.100299][   T27]  exit_to_user_mode_loop+0x110/0x188
[ 3750.100766][   T27]  el0_svc+0x17c/0x238
[ 3750.101292][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 3750.101784][   T27]  el0t_64_sync+0x198/0x19c
[ 3750.348440][   T27] 
[ 3750.348440][   T27] Showing all locks held in the system:
[ 3750.382845][   T27] 3 locks held by kworker/u4:0/12:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 3750.436595][   T27] 5 locks held by kworker/u4:1/21:
[ 3750.465513][   T27] 1 lock held by khungtaskd/27:
[ 3750.466037][   T27]  #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 3750.469021][   T27] 3 locks held by kworker/u4:5/52:
[ 3750.469525][   T27] 1 lock held by klogd/3134:
[ 3750.469849][   T27] 1 lock held by dhcpcd/3171:
[ 3750.470183][   T27] 2 locks held by getty/3201:
[ 3750.470523][   T27]  #0: 6ef00000122e28a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 3750.472388][   T27]  #1: 80ff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 3750.661261][   T27] 2 locks held by syz-executor/3327:
[ 3750.705889][   T27] 3 locks held by kworker/u4:6/3426:
[ 3750.708583][   T27] 2 locks held by kworker/u4:8/3431:
[ 3750.757027][   T27]  #0: c2f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 3750.759339][   T27]  #1: ffff8000a3da7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 3750.761042][   T27] 3 locks held by kworker/u4:11/3787:
[ 3750.761444][   T27] 2 locks held by kworker/u4:4/4174:
[ 3750.761762][   T27] 3 locks held by kworker/u4:9/4203:
[ 3750.762086][   T27] 2 locks held by kworker/u4:14/4206:
[ 3750.762431][   T27] 3 locks held by kworker/u4:3/4432:
[ 3750.762752][   T27] 3 locks held by kworker/u4:13/4473:
[ 3750.763108][   T27] 3 locks held by kworker/u4:15/4659:
[ 3750.916965][   T27] 2 locks held by syz.7.118/4718:
[ 3750.956070][   T27] 1 lock held by syz-executor/4739:
[ 3750.956577][   T27]  #0: ffff800087db21c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[ 3750.958443][   T27] 3 locks held by kworker/u4:10/4865:
[ 3750.958789][   T27] 2 locks held by modprobe/4893:
[ 3750.959266][   T27] 
[ 3750.959575][   T27] =============================================
[ 3750.959575][   T27] 
[ 3750.960498][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 3750.968475][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 3750.969819][   T27] Hardware name: linux,dummy-virt (DT)
[ 3750.970677][   T27] Call trace:
[ 3750.971511][   T27]  show_stack+0x2c/0x3c (C)
[ 3750.972512][   T27]  __dump_stack+0x30/0x40
[ 3750.973359][   T27]  dump_stack_lvl+0x30/0x12c
[ 3750.974278][   T27]  dump_stack+0x1c/0x28
[ 3750.975170][   T27]  vpanic+0x1d4/0x4e4
[ 3750.975964][   T27]  vpanic+0x0/0x4e4
[ 3750.976739][   T27]  hung_task_panic+0x0/0x2c
[ 3750.977656][   T27]  kthread+0x794/0x99c
[ 3750.978541][   T27]  ret_from_fork+0x10/0x20
[ 3750.980302][   T27] Kernel Offset: disabled
[ 3750.981006][   T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 3750.982103][   T27] Memory Limit: none
[ 3750.984299][   T27] Rebooting in 86400 seconds..