last executing test programs:

45m17.637452281s ago: executing program 0 (id=121):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x101, 0x1, 0x1, 0x0, @msi={0x3, 0xfffffeff, 0x28a, 0x3}}]})
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r12, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004219"], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

44m56.942674627s ago: executing program 0 (id=123):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x7}) (async)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x7})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0xfffffffffffffffe)

44m49.352599552s ago: executing program 0 (id=124):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x8010, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) (async)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a11f1, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000bfe000/0x400000)=nil, 0x0, 0xc, 0x100010, r4, 0x0) (async, rerun: 32)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000054c000/0x3000)=nil, r6, 0x4, 0x110, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000ece000/0x9000)=nil, 0x9000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) (async)
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

44m44.515222057s ago: executing program 1 (id=125):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd8) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x0, &(0x7f00000000c0)=0x10001}) (async, rerun: 64)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x20)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async)
r12 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x12)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000200)={0xffff, 0xffff, 0x6})
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000100)={0x4, <r15=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r15, 0x4018aee3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r15, 0x4018aee3, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async, rerun: 64)
close(r11) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async)
r16 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r16, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async)
ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0}) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

44m41.606360776s ago: executing program 0 (id=126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r11, 0x800454cf, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)

44m35.125389744s ago: executing program 1 (id=127):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080700})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10004, 0x0, &(0x7f0000c82000/0x4000)=nil})

44m26.817675718s ago: executing program 1 (id=128):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000400004040)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="be00000000000000180000000000000001c8"], 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000080)=@arm64_extra={0x603000000013df01, &(0x7f0000000000)=0x2})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x800000000108, &(0x7f0000000340)=0x2})
syz_kvm_setup_cpu$arm64(r3, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0xfffffffffffffd9b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}})
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x340)

44m26.317463866s ago: executing program 0 (id=129):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x40040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x8003}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
write$eventfd(r8, &(0x7f00000001c0), 0xf001)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000000c0)=0x8, 0x8)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x24)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r11, 0x3000000, 0x4f831, r10, 0x0)

44m21.195099284s ago: executing program 0 (id=130):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0xc0980, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close(r4)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xcb3993e4c7433bb8, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r12, 0x4004aec2, &(0x7f0000000000)=0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x7, <r13=>0xffffffffffffffff})
r14 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@svc={0x122, 0x40, {0x0, [0x9, 0x6, 0x2, 0xa, 0x4]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x371}}, @smc={0x1e, 0x40, {0xc5000021, [0x73d, 0x5, 0x2, 0x9, 0x2]}}, @svc={0x122, 0x40, {0x8400000b, [0x6, 0x15, 0x1, 0x266, 0x7ff]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x2, 0x20004000, 0x1000, 0x3}}, @code={0xa, 0x54, {"1f000031007008d500c8302e007008d5000008d5000008d5000008d500f98dd20020b0f2610080d2a20180d2630080d2040080d2020000d4000000bc0068284e"}}, @hvc={0x32, 0x40, {0x8400000c, [0x0, 0x0, 0x7, 0xaca, 0x62d4]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0xa, 0x9}}], 0x1d4}, &(0x7f0000000340)=[@featur2={0x1, 0x80}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000bfd000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r18, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c025, &(0x7f00000000c0)=0x6})
ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, 0x0)

44m17.69712664s ago: executing program 1 (id=131):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x18}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}})

44m12.917483569s ago: executing program 1 (id=132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x4, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2000001c)

44m8.690366982s ago: executing program 1 (id=133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r10 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r10})
close(r5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7}) (async)
eventfd2(0x8, 0x80800) (async)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r10}) (async)
close(r5) (async)

43m34.606121892s ago: executing program 32 (id=130):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0xc0980, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close(r4)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xcb3993e4c7433bb8, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r12, 0x4004aec2, &(0x7f0000000000)=0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x7, <r13=>0xffffffffffffffff})
r14 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@svc={0x122, 0x40, {0x0, [0x9, 0x6, 0x2, 0xa, 0x4]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x371}}, @smc={0x1e, 0x40, {0xc5000021, [0x73d, 0x5, 0x2, 0x9, 0x2]}}, @svc={0x122, 0x40, {0x8400000b, [0x6, 0x15, 0x1, 0x266, 0x7ff]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x2, 0x20004000, 0x1000, 0x3}}, @code={0xa, 0x54, {"1f000031007008d500c8302e007008d5000008d5000008d5000008d500f98dd20020b0f2610080d2a20180d2630080d2040080d2020000d4000000bc0068284e"}}, @hvc={0x32, 0x40, {0x8400000c, [0x0, 0x0, 0x7, 0xaca, 0x62d4]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x300, 0xa, 0x9}}], 0x1d4}, &(0x7f0000000340)=[@featur2={0x1, 0x80}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000bfd000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r18, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c025, &(0x7f00000000c0)=0x6})
ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, 0x0)

43m21.74482065s ago: executing program 33 (id=133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r10 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r10})
close(r5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7}) (async)
eventfd2(0x8, 0x80800) (async)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r10}) (async)
close(r5) (async)

32m24.352173844s ago: executing program 3 (id=182):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xc020660b, 0xe1) (async)
ioctl$KVM_CHECK_EXTENSION(r2, 0xc020660b, 0xe1)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3})
r5 = eventfd2(0x8, 0x80800)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r5})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x203, 0x0, 0x2, r4, 0xf})
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x18)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}})
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) (async)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r15, 0x3, 0x40b2811, r13, 0x0)

32m14.106873921s ago: executing program 2 (id=183):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0xeeef0000, 0x2, r3, 0x2})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000})
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)

32m8.966256481s ago: executing program 3 (id=184):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000100)={0x7, 0x779e})
munmap(&(0x7f000014a000/0x2000)=nil, 0x2000)

32m2.814960919s ago: executing program 2 (id=185):
r0 = openat$kvm(0x0, &(0x7f0000000180), 0x4700, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x12})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000640)=@arm64_core={0x6030000000100012, &(0x7f0000000000)=0x300000000000})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xe3)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r12, 0x4208ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x97ab, 0x10001, 0x3, 0xc08d, 0x8, 0xffffffff00000001, 0x3b880, 0x400, 0x5, 0x2, 0x6, 0x5, 0x2, 0x8, 0x6, 0x7fff], [0x45e1, 0x8000, 0x5d2, 0xfff, 0xbb9, 0x0, 0x8, 0xe, 0x51bb, 0x8, 0x4d681830, 0x9, 0x3, 0x10000, 0x7, 0xfffffffffffffff6], [0x80000001, 0xfffffffffffffffe, 0xa3, 0x0, 0x8, 0x81, 0x6, 0xfda8, 0x401, 0x5fd6, 0x3, 0x0, 0x40, 0x4, 0xffffffff, 0x9], [0x3, 0x6, 0xe99, 0xe, 0x9, 0x7, 0x8, 0x0, 0xb, 0x2, 0x10, 0x4, 0x9, 0x9, 0xc, 0x6]}})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000b10000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

31m57.565422651s ago: executing program 3 (id=186):
mmap$KVM_VCPU(&(0x7f0000fb0000/0x1000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3ff, 0x10001})
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x88283, 0x0)
r4 = eventfd2(0x0, 0x80000)
munmap(&(0x7f00008de000/0x4000)=nil, 0x4000)
munmap(&(0x7f00007ba000/0x1000)=nil, 0x1000)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x1fe, 0x0, &(0x7f0000ffc000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x100)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r4, 0x3})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffbfffd)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f00000000c0)={0x80000001, 0x9})
close(r7)
close(r8)

31m39.194696751s ago: executing program 2 (id=187):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x49e080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c6a000/0x3000)=nil, 0x930, 0x1000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 32)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r9, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async, rerun: 32)
r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r12, 0xc008aeb0, &(0x7f0000000000)) (async)
r13 = openat$kvm(0x0, &(0x7f0000000140), 0x40082, 0x0) (async)
r14 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f0000000200)}, 0x0, 0x0) (async, rerun: 32)
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) (async, rerun: 32)
r17 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r19 = syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil)
r20 = syz_kvm_add_vcpu$arm64(r19, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r20, 0x6, 0x8000) (async)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r16, 0x3, 0x40b2811, r15, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

31m36.997866686s ago: executing program 3 (id=188):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140))
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000ab8000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001})
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xc3)

31m27.775853039s ago: executing program 2 (id=189):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c6a000/0x3000)=nil, 0x930, 0x1000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x603000000010000c, &(0x7f00000000c0)=0x2})
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000480)={0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0x30000000, [0x8, 0x8, 0xffffffff8c55ea73, 0x1053, 0x6]}}, @hvc={0x32, 0x40, {0xc4000014, [0xfa34, 0x8, 0x3, 0x8000000000000000, 0x9]}}, @hvc={0x32, 0x40, {0x100, [0x3, 0x6, 0x2, 0x5, 0x8]}}, @svc={0x122, 0x40, {0x4000, [0x8, 0x10001, 0x8000000000000000, 0x1, 0x401]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x7, 0xe, 0x2, 0x4}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x6c, {"007008d5000008d5408a92d20000b8f2a10080d2220080d2430180d2640180d2020000d4008008d5605c81d20080b8f2210080d2820080d2430080d2e40080d2020000d40000001c00c0221e000028d5e00300aa007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x200, 0x4}}, @msr={0x14, 0x20, {0x603000000013c600, 0xf}}, @eret={0xe6, 0x18, 0x4}, @hvc={0x32, 0x40, {0x80000000, [0x8, 0x0, 0x8, 0x1, 0x1]}}, @code={0xa, 0x54, {"007008d5007008d5000008d50060c00d20f883d20080b0f2410080d2020180d2030180d2440080d2020000d400800048008008d5000008d5008008d500a0200e"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x3ff}}, @memwrite={0x6e, 0x30, @generic={0x4000, 0xdca, 0x3, 0x9}}], 0x300}, &(0x7f00000004c0)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000000))

31m23.242524006s ago: executing program 3 (id=190):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2502, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0xa, 0x0, [{0xc00000, 0x3, 0x0, 0x0, @msi={0x6, 0x9, 0x1ff, 0x81}}, {0x7fffffff, 0x4, 0x1, 0x0, @sint={0x6, 0x50000000}}, {0x4b63e77a, 0x5, 0x0, 0x0, @irqchip={0x8}}, {0x506, 0x1, 0x1, 0x0, @msi={0xc, 0x0, 0x7f, 0x95c}}, {0xfffffffe, 0x4, 0x1, 0x0, @irqchip={0x5, 0x5}}, {0x9f, 0x2, 0x1, 0x0, @adapter={0x3ff, 0x4, 0x4, 0x3, 0x3}}, {0x0, 0x3, 0x1, 0x0, @irqchip={0xc, 0xf}}, {0x7, 0x4, 0x0, 0x0, @msi={0xe0c7, 0xe4, 0x20, 0x99}}, {0x3, 0x5, 0x1, 0x0, @sint={0x2f6, 0x80}}, {0x63ba1911, 0x3, 0x0, 0x0, @adapter={0xa5, 0x9, 0x9, 0x4, 0x5}}]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf2, '\x00', 0xfffffffffffff109})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0xf0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7ffc, 0x5000, 0x2, 0xffffffffffffffff, 0x7ffffff9})

31m13.244925367s ago: executing program 2 (id=191):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013c646, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x344}}, @hvc={0x32, 0x40, {0x84000014, [0x5, 0x200, 0x4, 0x4, 0x10001]}}, @svc={0x122, 0x40, {0x20, [0x2, 0x4, 0x30000000, 0xba32, 0x401]}}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8000}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x778, 0x1, 0x1}}, @eret={0xe6, 0x18, 0xa36d}, @hvc={0x32, 0x40, {0x84000014, [0x4, 0x5, 0x904, 0x8, 0x1c000]}}, @memwrite={0x6e, 0x30, @generic={0x6000, 0x9ac, 0x7fffffffffffffff, 0x9}}, @svc={0x122, 0x40, {0x2000000, [0x0, 0x8, 0x5848, 0x6, 0x8]}}, @smc={0x1e, 0x40, {0x3b000000, [0x3, 0x0, 0x9, 0x8d8, 0x1]}}, @code={0xa, 0x54, {"0000679e007008d50060200d0024007f007008d5e0d787d20020b0f2810080d2a20080d2230080d2040180d2020000d40060000c00000028007008d5000cc0da"}}, @hvc={0x32, 0x40, {0xc4000012, [0x4, 0x2, 0x0, 0xcf9, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e609}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x6, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0xa, 0xfffffffc, 0x81, 0x1}}, @msr={0x14, 0x20, {0x603000000013e6c7, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0xca}}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x0, 0x59}}, @mrs={0xbe, 0x18, {0x603000000013def4}}, @uexit={0x0, 0x18, 0xfc}], 0x3bc}, &(0x7f0000000400)=[@featur1={0x1, 0x80}], 0x1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000440))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000004c0)={0x2000, 0x2, 0x6, 0x1, 0xa66})
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r2, 0x4068aea3, &(0x7f0000000500))
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000005c0)=@attr_other={0x0, 0x400, 0x7802b0e5, &(0x7f0000000580)=0x9})
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000600)=0x4)
r4 = mmap$KVM_VCPU(&(0x7f0000fdf000/0x1000)=nil, 0x0, 0x3000000, 0x40010, r3, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000640)="94cbaaa76840e9a76cd84daa090d99a42df743093e7822c3", 0x0, 0x18)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000680)={0xc0, 0x0, 0x8000})
ioctl$KVM_SET_SREGS(r3, 0x4000ae84, &(0x7f0000000700)={{0x3000, 0x80a0000, 0xd, 0xff, 0xf2, 0x1, 0x7, 0x3, 0x0, 0x1, 0x6, 0xf}, {0xf000, 0x6000, 0xe, 0x4, 0x3, 0x3, 0x86, 0x1, 0x7, 0x0, 0x60, 0xad}, {0xffe5c002, 0x4000, 0xc, 0x9, 0x2f, 0x2, 0x9, 0xf5, 0x7f, 0xb, 0xa, 0xf}, {0x0, 0xf000, 0xd, 0x1, 0x5, 0x7, 0x79, 0x9b, 0x3f, 0xac, 0x0, 0x8}, {0xeeee8000, 0x2000, 0x3, 0x4, 0x3, 0x2, 0x67, 0xf6, 0x3, 0x4, 0x4, 0x61}, {0x10000, 0x10000, 0x4, 0x0, 0x1, 0x3, 0x1, 0x1f, 0xc, 0x48, 0x89, 0xb}, {0x100000, 0xeeef0000, 0x10, 0x3, 0x0, 0x6, 0x4, 0x0, 0x9, 0x0, 0x1, 0x8}, {0x8080000, 0x1000, 0x10, 0x1, 0x6, 0x6, 0x2, 0x4, 0x9, 0x8, 0x5, 0x1}, {0xffff1000, 0x7}, {0xd000, 0x2}, 0x0, 0x0, 0x2000, 0x400300, 0x2, 0x7101, 0x80a0000, [0x2, 0x9149, 0x800, 0x200]})
r6 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x26)
ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000840)={0xb6, 0x0, 0x7fffffffffffffff})
ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f00000008c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0)
syz_kvm_setup_cpu$arm64(r6, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000b80)=[{0x0, &(0x7f0000000980)=[@irq_setup={0x46, 0x18, {0x2, 0x14e}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x3}, @hvc={0x32, 0x40, {0x2, [0x3, 0x9, 0x8ad4, 0x9, 0x1]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x2b6}}, @msr={0x14, 0x20, {0x603000000013c640, 0x8000000000000000}}, @msr={0x14, 0x20, {0x603000000013df7e, 0x10000}}, @irq_setup={0x46, 0x18, {0x2, 0x332}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0xffff, [0x101, 0x7, 0x5, 0x4, 0x400]}}, @smc={0x1e, 0x40, {0x84000006, [0xc85, 0x4, 0xfff, 0x2, 0x6]}}, @irq_setup={0x46, 0x18, {0x0, 0x1b6}}, @irq_setup={0x46, 0x18, {0x0, 0x3c7}}], 0x1d0}], 0x1, 0x0, &(0x7f0000000bc0)=[@featur1={0x1, 0x40}], 0x1)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000c40)=@arm64_ccsidr={0x6020000000110000, &(0x7f0000000c00)=0x10001})
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xe4, 0x0, 0x40})
r9 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000d40)=@attr_other={0x0, 0x0, 0x81, &(0x7f0000000d00)=0x7})
close(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000d80)={0x10003, 0x7, 0xf000, 0x1000, &(0x7f0000e4e000/0x1000)=nil})

31m6.895026504s ago: executing program 3 (id=192):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x400454d1, 0x110c230000)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0xc4000053, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x8, &(0x7f0000000140)=0x4})
ioctl$KVM_GET_SREGS(r6, 0x8000ae83, &(0x7f0000000280))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

31m4.348432959s ago: executing program 2 (id=193):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3480ae0458b668f37f9a8457a3bf000", 0x0, 0x18)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x24f}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x40000008, 0x0, 0x80}}], 0x50}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r7, 0x8, 0x40010, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)

30m19.369462166s ago: executing program 34 (id=192):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x400454d1, 0x110c230000)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0xc4000053, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x8, &(0x7f0000000140)=0x4})
ioctl$KVM_GET_SREGS(r6, 0x8000ae83, &(0x7f0000000280))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

30m14.445625175s ago: executing program 35 (id=193):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3480ae0458b668f37f9a8457a3bf000", 0x0, 0x18)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x24f}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x40000008, 0x0, 0x80}}], 0x50}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r7, 0x8, 0x40010, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)

24m2.434635618s ago: executing program 5 (id=195):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000280)=0x1})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x1, 0x1001, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000200)=@arm64_ccsidr={0x602000000011000b, &(0x7f0000000300)=0xffffffff})
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000180)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xbb4})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})

23m54.977929021s ago: executing program 4 (id=194):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x402400, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000100)={0x55})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f0000000000)={0x0, 0x100, 0x1c0, 0x0})
r13 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x4, 0x0})
r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r18, 0x603000000013df12, 0x8000)

23m39.963108636s ago: executing program 5 (id=196):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xb}, @code={0xa, 0x9c, {"205f93d20020b8f2e10180d2e20080d2e30080d2a40180d2020000d4007008d5007008d5007008d560b584d200a0b0f2410180d2a20180d2e30080d2640180d2020000d40050200e0004601e007008d580d58bd200a0b0f2a10180d2c20180d2230080d2a40180d2020000d4402689d200e0b8f2c10080d2a20080d2030180d2a40180d2020000d4"}}], 0xb4}, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0xe80)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c298}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

23m7.154574298s ago: executing program 36 (id=194):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x402400, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000100)={0x55})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f0000000000)={0x0, 0x100, 0x1c0, 0x0})
r13 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x4, 0x0})
r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r18, 0x603000000013df12, 0x8000)

22m50.405563065s ago: executing program 37 (id=196):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xb}, @code={0xa, 0x9c, {"205f93d20020b8f2e10180d2e20080d2e30080d2a40180d2020000d4007008d5007008d5007008d560b584d200a0b0f2410180d2a20180d2e30080d2640180d2020000d40050200e0004601e007008d580d58bd200a0b0f2a10180d2c20180d2230080d2a40180d2020000d4402689d200e0b8f2c10080d2a20080d2030180d2a40180d2020000d4"}}], 0xb4}, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0xe80)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c298}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15m43.11918295s ago: executing program 6 (id=197):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x2, 0x100)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x9, <r11=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f0000000100)=0x5})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000380)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

15m28.605256233s ago: executing program 7 (id=198):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x4010, 0xffffffffffffffff, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@its_setup={0x7, 0x28, {0x0, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x3, 0xa0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000b3f000/0x400000)=nil, &(0x7f0000000340)=[{0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r6], 0x80}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_CAP_ARM_USER_IRQ(r3, 0x4068aea3, &(0x7f00000001c0))
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)

15m17.150560293s ago: executing program 6 (id=199):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffb}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x1})

15m2.37983794s ago: executing program 7 (id=200):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x18800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x57)

15m0.584650298s ago: executing program 6 (id=201):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x0, 0x79, 0x1}}], 0xffffffffffffffcb}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000900)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
close(r8)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000140)={0x8000000000000000, 0xa7})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f00000002c0)={0x10200, 0x2, 0xe6ee8004, 0x2000, &(0x7f0000cb8000/0x2000)=nil, 0x8, r11})
r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x8})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x4})
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000001c0)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000180)=0x10})

14m50.745335872s ago: executing program 7 (id=202):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000053, [0x80000000000, 0x6, 0xf1, 0x6f4, 0x1]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c02a, &(0x7f0000000180)})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f00000002c0)={0x0, &(0x7f0000000380)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x1005, 0x9}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r19=>0xffffffffffffffff})
ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_SET_DEVICE_ATTR(r19, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r18, 0xae80, 0x0)

14m36.3613102s ago: executing program 6 (id=203):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x20}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14m2.724596795s ago: executing program 38 (id=202):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000053, [0x80000000000, 0x6, 0xf1, 0x6f4, 0x1]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c02a, &(0x7f0000000180)})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f00000002c0)={0x0, &(0x7f0000000380)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x1005, 0x9}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r19=>0xffffffffffffffff})
ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_SET_DEVICE_ATTR(r19, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r18, 0xae80, 0x0)

13m45.635755319s ago: executing program 39 (id=203):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x20}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m4.496915185s ago: executing program 9 (id=215):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x76)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x1a})
r6 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x8005})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000240), 0x1b1303, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f0000000380)}, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0xffff7ffffffffffb)

2m32.610854872s ago: executing program 9 (id=217):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3})
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0xe7})
r14 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x100000, 0x2000, &(0x7f0000d21000/0x2000)=nil})
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000140)=0x20000000009})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0x2ff, 0x1}})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

2m30.949259347s ago: executing program 8 (id=218):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r0, 0x1000008, 0x810, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="93ac83876b8956b9fa6d86de25d50f886c9e84f9372c825bd6e25b6344f58818721a48e93eaa3c26d4f2a5003c7fb8d1a4ff08ba4f4243005e69ae2205e9e66690ac5f7ddf54eb6b", 0x0, 0x48)

2m8.424444853s ago: executing program 8 (id=219):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x40) (async)
r9 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x4, &(0x7f00000004c0)=0x1}) (async)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x4, &(0x7f00000004c0)=0x1})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m2.120855804s ago: executing program 9 (id=220):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5452, 0x2000fdfd)

1m46.947560189s ago: executing program 9 (id=221):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0xfffffffd, 0x239}}], 0x18}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m43.822881963s ago: executing program 8 (id=222):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r0, 0x2, 0x113, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)

1m32.47758619s ago: executing program 9 (id=223):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r5}) (async)
close(r5)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141000, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305828, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x80000000, &(0x7f00000001c0)=0x40}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1f)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x6})
r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})

1m29.979002466s ago: executing program 8 (id=224):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x123402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0x84000051, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r7, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r10 = eventfd2(0x8, 0x80800) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bfd000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c025, &(0x7f00000000c0)=0x6}) (async)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r10, 0x2}) (async)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r10, 0x3})
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x7, 0x74d2b86d, 0x1}})

1m13.109996778s ago: executing program 9 (id=225):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5d)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x77)
r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df62, 0xc00000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x7ffc, 0x5000, 0x2, 0xffffffffffffffff, 0x7ffffff9})

1m8.689027396s ago: executing program 8 (id=226):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x2, 0xd002, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x1, 0x4, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r1 = syz_kvm_vgic_v3_setup(r0, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x0, &(0x7f0000000080)=0xe146}) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000500)=[{0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013dee0}}, @mrs={0xbe, 0x18, {0x603000000013e530}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0xbc}}, @hvc={0x32, 0x40, {0x80008000, [0x6, 0x8, 0xffff, 0x0, 0x6ea3]}}, @irq_setup={0x46, 0x18, {0x3, 0x104}}, @hvc={0x32, 0x40, {0x84000053, [0x850, 0x43, 0x2, 0x400]}}, @uexit={0x0, 0x18, 0x395}, @svc={0x122, 0x40, {0x3f000000, [0x8, 0x0, 0x5, 0xc87, 0x4]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x149}}, @smc={0x1e, 0x40, {0x20, [0x0, 0x6, 0x4, 0xfffffffffffffffb, 0xf7c]}}, @msr={0x14, 0x20, {0x50280000001a3821, 0x80000000}}, @msr={0x14, 0x20, {0x603000000013c804, 0x1000}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0xc1}, @smc={0x1e, 0x40, {0x0, [0x9, 0x75fe2516, 0x3, 0x8000000000000000, 0x81cb]}}, @hvc={0x32, 0x40, {0x84000014, [0x9, 0x0, 0x6, 0x0, 0xbf]}}, @code={0xa, 0x9c, {"007008d5000840780084e00d003294d200e0b0f2e10180d2620080d2c30080d2e40180d2020000d4007008d5007008d5a02a8ed200e0b8f2410080d2220080d2e30180d2e40180d2020000d4e00485d200e0b0f2810180d2a20080d2830180d2240080d2020000d4204b85d200a0b8f2610180d2c20080d2030080d2240080d2020000d400a49f0d"}}, @mrs={0xbe, 0x18, {0x603000000013c3a0}}, @mrs={0xbe, 0x18, {0x603000000013c100}}, @smc={0x1e, 0x40, {0x8600ff01, [0x4, 0x7, 0x2, 0x3b44, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013e658}}, @eret={0xe6, 0x18, 0x2}], 0x3dc}], 0x1, 0x0, &(0x7f0000000540)=[@featur2={0x1, 0x89}], 0x1) (async, rerun: 32)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c03000/0x2000)=nil, r4, 0x8, 0x10010, r3, 0x0) (async, rerun: 64)
ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000580)={0xb6, 0x0, 0x7}) (rerun: 64)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000600)={0x4, [0xfffffffffffffff8, 0x316b409e, 0x6, 0x4e99]})
r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000780)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0xd}, @irq_setup={0x46, 0x18, {0x1, 0x56}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x3a0}}, @mrs={0xbe, 0x18}, @mrs={0xbe, 0x18, {0x603000000013e530}}, @mrs={0xbe, 0x18, {0x301800000009dc4f}}, @smc={0x1e, 0x40, {0x84000052, [0x0, 0x80000000, 0x7ff, 0x5, 0xfffffffffffffaa9]}}, @irq_setup={0x46, 0x18, {0x1, 0x21c}}, @irq_setup={0x46, 0x18, {0x4, 0x1d3}}], 0x110}, &(0x7f00000007c0)=[@featur2={0x1, 0x80}], 0x1)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000800)=@attr_pmu_init)
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000840)={0x2, [0x4, 0x52]})
r8 = eventfd2(0x5, 0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000880)={0x7, 0x10000, 0x0, r8, 0xe}) (async)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f00000008c0)={0x8080000, 0x44ce1189f6b358cd, 0x1}) (async, rerun: 32)
ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000900)={0x2, 0xc11}) (async, rerun: 32)
r10 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000940)={0x3, 0x140}) (async)
ioctl$KVM_CAP_ARM_MTE(r9, 0x4068aea3, &(0x7f0000000980)) (async)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000a40)=@attr_arm64={0x0, 0x8, 0x1, &(0x7f0000000a00)}) (async)
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000a80)={0x9, [0x4, 0x78, 0xfa9, 0xffffffffffffe308, 0x8, 0x93, 0x9, 0x400, 0x400]}) (async)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000b00)={0xf000, 0x6000, 0x80, 0x1, 0x401}) (async)
r11 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r11, 0x4068aea3, &(0x7f0000000b40)={0xe4, 0x0, 0x1ff})

50.804518329s ago: executing program 8 (id=227):
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, r4, 0x1000004, 0x10, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x4c4883, 0x0)

24.858709192s ago: executing program 40 (id=225):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5d)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x77)
r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df62, 0xc00000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x34)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x7ffc, 0x5000, 0x2, 0xffffffffffffffff, 0x7ffffff9})

0s ago: executing program 41 (id=227):
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, r4, 0x1000004, 0x10, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x4c4883, 0x0)

kernel console output (not intermixed with test programs):

[  372.887045][ T3156] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.304253][ T3156] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:33866' (ED25519) to the list of known hosts.
[  581.771953][   T25] audit: type=1400 audit(581.000:61): avc:  denied  { name_bind } for  pid=3310 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  584.011144][   T25] audit: type=1400 audit(583.230:62): avc:  denied  { execute } for  pid=3311 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  584.037068][   T25] audit: type=1400 audit(583.260:63): avc:  denied  { execute_no_trans } for  pid=3311 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  606.521821][   T25] audit: type=1400 audit(605.750:64): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  606.559542][   T25] audit: type=1400 audit(605.780:65): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  606.639926][ T3311] cgroup: Unknown subsys name 'net'
[  606.686253][   T25] audit: type=1400 audit(605.910:66): avc:  denied  { unmount } for  pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  607.053347][ T3311] cgroup: Unknown subsys name 'cpuset'
[  607.153942][ T3311] cgroup: Unknown subsys name 'rlimit'
[  608.094247][   T25] audit: type=1400 audit(607.320:67): avc:  denied  { setattr } for  pid=3311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  608.113151][   T25] audit: type=1400 audit(607.340:68): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  608.143726][   T25] audit: type=1400 audit(607.360:69): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  609.322139][ T3314] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  609.343627][   T25] audit: type=1400 audit(608.560:70): avc:  denied  { relabelto } for  pid=3314 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  609.366952][   T25] audit: type=1400 audit(608.590:71): avc:  denied  { write } for  pid=3314 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  609.533322][   T25] audit: type=1400 audit(608.760:72): avc:  denied  { read } for  pid=3311 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  609.554148][   T25] audit: type=1400 audit(608.780:73): avc:  denied  { open } for  pid=3311 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  609.600341][ T3311] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  659.641383][   T25] audit: type=1400 audit(658.830:74): avc:  denied  { execmem } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  664.242689][   T25] audit: type=1400 audit(663.470:75): avc:  denied  { read } for  pid=3317 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  664.266685][   T25] audit: type=1400 audit(663.490:76): avc:  denied  { open } for  pid=3317 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  664.366443][   T25] audit: type=1400 audit(663.590:77): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  664.641217][   T25] audit: type=1400 audit(663.870:78): avc:  denied  { module_request } for  pid=3317 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  664.655098][   T25] audit: type=1400 audit(663.880:79): avc:  denied  { module_request } for  pid=3318 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  665.769378][   T25] audit: type=1400 audit(664.960:80): avc:  denied  { sys_module } for  pid=3318 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  689.291188][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.365427][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.463358][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.795660][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.673926][ T3317] hsr_slave_0: entered promiscuous mode
[  705.750670][ T3317] hsr_slave_1: entered promiscuous mode
[  707.120783][ T3318] hsr_slave_0: entered promiscuous mode
[  707.163023][ T3318] hsr_slave_1: entered promiscuous mode
[  707.222346][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[  707.231101][ T3318] Cannot create hsr debugfs directory
[  712.925414][   T25] audit: type=1400 audit(712.150:81): avc:  denied  { create } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  712.954949][   T25] audit: type=1400 audit(712.170:82): avc:  denied  { write } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  713.025311][   T25] audit: type=1400 audit(712.250:83): avc:  denied  { read } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  713.174562][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  713.546809][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  713.876278][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  714.176542][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  715.664920][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  715.796024][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  716.011549][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  716.144351][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  728.324026][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.684801][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.412350][ T3317] veth0_vlan: entered promiscuous mode
[  785.914688][ T3317] veth1_vlan: entered promiscuous mode
[  787.810265][ T3317] veth0_macvtap: entered promiscuous mode
[  787.953749][ T3318] veth0_vlan: entered promiscuous mode
[  788.133498][ T3317] veth1_macvtap: entered promiscuous mode
[  788.910950][ T3318] veth1_vlan: entered promiscuous mode
[  790.249460][ T2137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.264166][ T2137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.272110][ T2137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.280427][ T2137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.800030][ T3318] veth0_macvtap: entered promiscuous mode
[  792.555802][ T3318] veth1_macvtap: entered promiscuous mode
[  792.723879][   T25] audit: type=1400 audit(791.940:84): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  792.880834][   T25] audit: type=1400 audit(792.100:85): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.eLfJdV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  793.050921][   T25] audit: type=1400 audit(792.270:86): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  793.358879][   T25] audit: type=1400 audit(792.580:87): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.eLfJdV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  793.473236][   T25] audit: type=1400 audit(792.700:88): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.eLfJdV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  794.305164][   T25] audit: type=1400 audit(793.530:89): avc:  denied  { unmount } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  794.444611][   T25] audit: type=1400 audit(793.670:90): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  794.502090][ T3371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.505865][ T3371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.513556][ T3371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.535003][ T3371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.613093][   T25] audit: type=1400 audit(793.840:91): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  794.815583][   T25] audit: type=1400 audit(794.040:92): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  794.924391][   T25] audit: type=1400 audit(794.150:93): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  796.543522][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  806.355821][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  806.365639][   T25] audit: type=1400 audit(805.520:98): avc:  denied  { read } for  pid=3471 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.381448][   T25] audit: type=1400 audit(805.580:99): avc:  denied  { open } for  pid=3471 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.744885][   T25] audit: type=1400 audit(805.970:100): avc:  denied  { ioctl } for  pid=3471 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  809.660238][   T25] audit: type=1400 audit(808.880:101): avc:  denied  { write } for  pid=3471 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  854.284696][ T3504] kvm [3504]: Failed to find VMA for hva 0x21016000
[  862.739519][   T25] audit: type=1400 audit(861.860:102): avc:  denied  { execute } for  pid=3508 comm="syz.1.13" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  873.712763][ T3517] KVM: debugfs: duplicate directory 3517-5
[  904.278806][   T25] audit: type=1400 audit(903.450:103): avc:  denied  { append } for  pid=3536 comm="syz.1.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  933.052234][   T25] audit: type=1400 audit(932.210:104): avc:  denied  { ioctl } for  pid=3551 comm="syz.1.28" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1126.253216][ T3660] kvm [3660]: Failed to find VMA for hva 0x20c01000
[ 1126.263559][ T3659] kvm [3659]: Failed to find VMA for hva 0x20c01000
[ 1405.375627][ T3847] kvm [3847]: Failed to find VMA for hva 0x21016000
[ 1428.600208][ T3853] kvm [3853]: Failed to find VMA for hva 0x20c01000
[ 1446.263436][ T3870] kvm [3870]: Failed to find VMA for hva 0x20c01000
[ 1561.589472][ T3893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1561.872217][ T3893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1586.175639][ T3903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1586.890503][ T3903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1590.714554][ T3893] hsr_slave_0: entered promiscuous mode
[ 1590.785656][ T3893] hsr_slave_1: entered promiscuous mode
[ 1590.883188][ T3893] debugfs: 'hsr0' already exists in 'hsr'
[ 1590.898924][ T3893] Cannot create hsr debugfs directory
[ 1604.981499][ T3893] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1605.364013][ T3893] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1605.699960][ T3893] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1606.003304][ T3893] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1614.944118][ T3903] hsr_slave_0: entered promiscuous mode
[ 1615.025162][ T3903] hsr_slave_1: entered promiscuous mode
[ 1615.139098][ T3903] debugfs: 'hsr0' already exists in 'hsr'
[ 1615.148463][ T3903] Cannot create hsr debugfs directory
[ 1634.392046][ T3903] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1634.814801][ T3903] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1635.076613][ T3903] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1635.626489][ T3903] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1638.101216][ T3893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1662.134775][ T3903] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1741.464294][ T4037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.054074][ T4037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1744.700145][ T4037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1745.211412][ T3893] veth0_vlan: entered promiscuous mode
[ 1745.666677][ T4037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1747.110858][ T3893] veth1_vlan: entered promiscuous mode
[ 1761.035116][ T4037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1761.145144][ T4037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1761.210578][ T4037] bond0 (unregistering): Released all slaves
[ 1762.582077][ T3893] veth0_macvtap: entered promiscuous mode
[ 1763.700555][ T4037] hsr_slave_0: left promiscuous mode
[ 1763.953124][ T4037] hsr_slave_1: left promiscuous mode
[ 1764.442843][ T4037] veth1_macvtap: left promiscuous mode
[ 1764.485799][ T4037] veth0_macvtap: left promiscuous mode
[ 1764.502430][ T4037] veth1_vlan: left promiscuous mode
[ 1764.523941][ T4037] veth0_vlan: left promiscuous mode
[ 1777.990451][ T3893] veth1_macvtap: entered promiscuous mode
[ 1781.401126][ T3369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.403170][ T3369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.480954][ T3369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1781.513401][ T3947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1784.406255][ T4037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1786.013204][ T4037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1787.401336][ T4037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.004620][ T4037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1790.819380][ T3903] veth0_vlan: entered promiscuous mode
[ 1792.104140][ T3903] veth1_vlan: entered promiscuous mode
[ 1815.952796][ T4037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1816.454543][ T4037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1816.725037][ T4037] bond0 (unregistering): Released all slaves
[ 1819.164004][ T4037] hsr_slave_0: left promiscuous mode
[ 1819.221045][ T4037] hsr_slave_1: left promiscuous mode
[ 1819.820784][ T4037] veth1_macvtap: left promiscuous mode
[ 1819.840620][ T4037] veth0_macvtap: left promiscuous mode
[ 1819.852532][ T4037] veth1_vlan: left promiscuous mode
[ 1819.894310][ T4037] veth0_vlan: left promiscuous mode
[ 1846.143581][ T3903] veth0_macvtap: entered promiscuous mode
[ 1847.114985][ T3903] veth1_macvtap: entered promiscuous mode
[ 1850.911711][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1850.915758][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1850.989128][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1850.990169][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2043.361764][   T25] audit: type=1400 audit(2042.510:105): avc:  denied  { setattr } for  pid=4206 comm="syz.3.166" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2318.134753][ T4037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2320.656278][ T4037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2321.663905][ T4037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2322.795131][ T4037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2342.265933][ T4037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2342.446347][ T4037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2342.580616][ T4037] bond0 (unregistering): Released all slaves
[ 2346.082361][ T4037] hsr_slave_0: left promiscuous mode
[ 2346.432168][ T4037] hsr_slave_1: left promiscuous mode
[ 2347.316513][ T4037] veth1_macvtap: left promiscuous mode
[ 2347.401093][ T4037] veth0_macvtap: left promiscuous mode
[ 2347.439987][ T4037] veth1_vlan: left promiscuous mode
[ 2347.465355][ T4037] veth0_vlan: left promiscuous mode
[ 2372.562444][ T3961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2373.976392][ T3961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2375.322636][ T3961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2376.344525][ T3961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2393.241373][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2393.719509][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2393.943500][ T3961] bond0 (unregistering): Released all slaves
[ 2395.986693][ T3961] hsr_slave_0: left promiscuous mode
[ 2396.078468][ T3961] hsr_slave_1: left promiscuous mode
[ 2396.612701][ T3961] veth1_macvtap: left promiscuous mode
[ 2396.622281][ T3961] veth0_macvtap: left promiscuous mode
[ 2396.630049][ T3961] veth1_vlan: left promiscuous mode
[ 2396.649180][ T3961] veth0_vlan: left promiscuous mode
[ 2445.592112][ T4384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2446.216741][ T4384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2446.909996][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2447.715058][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2475.574850][ T4384] hsr_slave_0: entered promiscuous mode
[ 2475.655447][ T4384] hsr_slave_1: entered promiscuous mode
[ 2478.596076][ T4378] hsr_slave_0: entered promiscuous mode
[ 2478.696117][ T4378] hsr_slave_1: entered promiscuous mode
[ 2478.770061][ T4378] debugfs: 'hsr0' already exists in 'hsr'
[ 2478.811146][ T4378] Cannot create hsr debugfs directory
[ 2490.259717][ T4384] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2490.972003][ T4384] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2491.446430][ T4384] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2491.911115][ T4384] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2496.381415][ T4378] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2496.761498][ T4378] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2497.133381][ T4378] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2497.450317][ T4378] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2520.462453][ T4384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2526.765758][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2652.417011][ T4384] veth0_vlan: entered promiscuous mode
[ 2653.481318][ T4384] veth1_vlan: entered promiscuous mode
[ 2657.311379][ T4384] veth0_macvtap: entered promiscuous mode
[ 2658.453324][ T4384] veth1_macvtap: entered promiscuous mode
[ 2660.440733][ T4378] veth0_vlan: entered promiscuous mode
[ 2663.083941][ T4378] veth1_vlan: entered promiscuous mode
[ 2664.546915][ T3437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2664.733182][ T3437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2664.741291][ T3437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2664.849387][ T3437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2669.363745][ T4378] veth0_macvtap: entered promiscuous mode
[ 2669.984003][ T4378] veth1_macvtap: entered promiscuous mode
[ 2673.660594][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.664598][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.770237][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.779721][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2770.722461][ T3961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2774.190420][ T3961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2776.003087][ T3961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2777.906919][ T3961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2801.723462][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2801.962770][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2802.070777][ T3961] bond0 (unregistering): Released all slaves
[ 2804.680703][ T3961] hsr_slave_0: left promiscuous mode
[ 2804.979767][ T3961] hsr_slave_1: left promiscuous mode
[ 2805.642757][ T3961] veth1_macvtap: left promiscuous mode
[ 2805.678784][ T3961] veth0_macvtap: left promiscuous mode
[ 2805.700279][ T3961] veth1_vlan: left promiscuous mode
[ 2805.732687][ T3961] veth0_vlan: left promiscuous mode
[ 2841.772860][ T3961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2843.182898][ T3961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2844.346814][ T3961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2845.644508][ T3961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2865.882276][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2866.136540][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2866.345944][ T3961] bond0 (unregistering): Released all slaves
[ 2868.368511][ T3961] hsr_slave_0: left promiscuous mode
[ 2868.443782][ T3961] hsr_slave_1: left promiscuous mode
[ 2868.974460][ T3961] veth1_macvtap: left promiscuous mode
[ 2868.994771][ T3961] veth0_macvtap: left promiscuous mode
[ 2869.003937][ T3961] veth1_vlan: left promiscuous mode
[ 2869.042193][ T3961] veth0_vlan: left promiscuous mode
[ 2910.705478][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2910.965797][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2921.472680][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2921.823640][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2940.174028][ T4663] hsr_slave_0: entered promiscuous mode
[ 2940.253607][ T4663] hsr_slave_1: entered promiscuous mode
[ 2957.062500][ T4674] hsr_slave_0: entered promiscuous mode
[ 2957.175371][ T4674] hsr_slave_1: entered promiscuous mode
[ 2957.237006][ T4674] debugfs: 'hsr0' already exists in 'hsr'
[ 2957.259580][ T4674] Cannot create hsr debugfs directory
[ 2963.510355][ T4663] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2964.430614][ T4663] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2965.162067][ T4663] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2965.826693][ T4663] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2976.064340][ T4674] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2976.541212][ T4674] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2977.111755][ T4674] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2977.549804][ T4674] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2999.826300][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3010.243316][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3153.089469][ T4663] veth0_vlan: entered promiscuous mode
[ 3154.139756][ T4663] veth1_vlan: entered promiscuous mode
[ 3157.502544][ T4663] veth0_macvtap: entered promiscuous mode
[ 3158.005100][ T4663] veth1_macvtap: entered promiscuous mode
[ 3162.284084][ T4896] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3162.290532][ T4896] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3162.302819][ T4896] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3162.546965][ T3325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3163.984676][ T4674] veth0_vlan: entered promiscuous mode
[ 3166.441257][ T4674] veth1_vlan: entered promiscuous mode
[ 3171.615693][ T4674] veth0_macvtap: entered promiscuous mode
[ 3172.377136][ T4674] veth1_macvtap: entered promiscuous mode
[ 3176.965787][ T3437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3176.969993][ T3437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3177.029455][ T3437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3177.065333][ T4524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3345.141171][ T3437] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3347.281814][ T3437] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3349.065187][ T3437] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3350.943878][ T3437] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3380.065231][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3380.569994][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3380.753407][ T3437] bond0 (unregistering): Released all slaves
[ 3382.880488][ T3437] hsr_slave_0: left promiscuous mode
[ 3382.980021][ T3437] hsr_slave_1: left promiscuous mode
[ 3383.509095][ T3437] veth1_macvtap: left promiscuous mode
[ 3383.510401][ T3437] veth0_macvtap: left promiscuous mode
[ 3383.526648][ T3437] veth1_vlan: left promiscuous mode
[ 3383.551104][ T3437] veth0_vlan: left promiscuous mode
[ 3410.992638][ T3947] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3412.393177][ T3947] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3414.895888][ T3947] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3416.693718][ T3947] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3447.229037][ T3947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3447.550667][ T3947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3447.734173][ T3947] bond0 (unregistering): Released all slaves
[ 3450.068571][ T3947] hsr_slave_0: left promiscuous mode
[ 3450.170599][ T3947] hsr_slave_1: left promiscuous mode
[ 3450.892708][ T3947] veth1_macvtap: left promiscuous mode
[ 3450.913884][ T3947] veth0_macvtap: left promiscuous mode
[ 3450.920555][ T3947] veth1_vlan: left promiscuous mode
[ 3450.950871][ T3947] veth0_vlan: left promiscuous mode
[ 3495.325391][ T4964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3495.766429][ T4964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3504.992109][ T4971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3505.383653][ T4971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3530.655807][ T4964] hsr_slave_0: entered promiscuous mode
[ 3530.775498][ T4964] hsr_slave_1: entered promiscuous mode
[ 3542.431256][ T4971] hsr_slave_0: entered promiscuous mode
[ 3542.553753][ T4971] hsr_slave_1: entered promiscuous mode
[ 3542.620575][ T4971] debugfs: 'hsr0' already exists in 'hsr'
[ 3542.635114][ T4971] Cannot create hsr debugfs directory
[ 3562.751035][ T4964] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3563.930565][ T4964] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3564.880196][ T4964] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3565.544254][ T4964] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3573.224709][ T4971] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3573.843142][ T4971] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3574.435493][ T4971] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3574.911331][ T4971] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3603.050746][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3612.681670][ T4971] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3780.760885][ T4964] veth0_vlan: entered promiscuous mode
[ 3782.342513][ T4964] veth1_vlan: entered promiscuous mode
[ 3786.854259][ T4964] veth0_macvtap: entered promiscuous mode
[ 3787.946827][ T4964] veth1_macvtap: entered promiscuous mode
[ 3793.236317][ T4971] veth0_vlan: entered promiscuous mode
[ 3794.786939][ T4896] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3794.789326][ T4896] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3794.792771][ T4896] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3794.793580][ T4896] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3796.505666][ T4971] veth1_vlan: entered promiscuous mode
[ 3805.085869][ T4971] veth0_macvtap: entered promiscuous mode
[ 3806.694986][ T4971] veth1_macvtap: entered promiscuous mode
[ 3811.944887][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3811.966085][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3812.148314][ T4896] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3812.232642][ T4896] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4262.049883][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4262.435984][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4288.523714][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4289.094241][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4327.516803][ T5342] hsr_slave_0: entered promiscuous mode
[ 4327.764881][ T5342] hsr_slave_1: entered promiscuous mode
[ 4327.921642][ T5342] debugfs: 'hsr0' already exists in 'hsr'
[ 4327.949177][ T5342] Cannot create hsr debugfs directory
[ 4359.325302][ T5353] hsr_slave_0: entered promiscuous mode
[ 4359.562023][ T5353] hsr_slave_1: entered promiscuous mode
[ 4359.694603][ T5353] debugfs: 'hsr0' already exists in 'hsr'
[ 4359.751170][ T5353] Cannot create hsr debugfs directory
[ 4398.923048][ T5342] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 4402.990712][ T5342] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 4404.156484][ T5342] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 4407.779567][ T5342] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 4427.591910][ T5353] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 4428.295585][ T5353] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 4429.026785][ T5353] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 4429.692082][ T5353] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 4466.132498][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4483.120822][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4517.743772][   T27] INFO: task syz.8.227:5328 blocked for more than 430 seconds.
[ 4517.750300][   T27]       Not tainted syzkaller #0
[ 4517.798839][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4517.799680][   T27] task:syz.8.227       state:D stack:0     pid:5328  tgid:5328  ppid:4964   task_flags:0x400040 flags:0x00000019
[ 4517.801207][   T27] Call trace:
[ 4517.801700][   T27]  __switch_to+0x584/0xb20 (T)
[ 4517.803769][   T27]  __schedule+0x1eec/0x33a4
[ 4517.804364][   T27]  schedule+0xac/0x27c
[ 4517.804872][   T27]  schedule_timeout+0x5c/0x1e4
[ 4517.805321][   T27]  do_wait_for_common+0x28c/0x444
[ 4517.805726][   T27]  wait_for_completion+0x44/0x5c
[ 4517.806232][   T27]  __synchronize_srcu+0x2a4/0x320
[ 4517.806699][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 4518.125546][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 4518.158575][   T27]  kvm_put_kvm+0x6a0/0xfa8
[ 4518.159274][   T27]  kvm_vm_release+0x58/0x78
[ 4518.159779][   T27]  __fput+0x4ac/0x980
[ 4518.160213][   T27]  ____fput+0x20/0x58
[ 4518.160595][   T27]  task_work_run+0x1bc/0x254
[ 4518.161030][   T27]  do_notify_resume+0x1bc/0x270
[ 4518.161463][   T27]  el0_svc+0xb8/0x164
[ 4518.161900][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 4518.162335][   T27]  el0t_64_sync+0x198/0x19c
[ 4518.163971][   T27] 
[ 4518.163971][   T27] Showing all locks held in the system:
[ 4518.164458][   T27] 1 lock held by khungtaskd/27:
[ 4518.164850][   T27]  #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 4518.334059][   T27] 2 locks held by getty/3186:
[ 4518.376349][   T27]  #0: a4f0000011d0e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 4518.420763][   T27]  #1: 55ff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 4518.422465][   T27] 2 locks held by syz-executor/3311:
[ 4518.422825][   T27] 2 locks held by kworker/u4:2/3369:
[ 4518.423137][   T27]  #0: 10f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4518.424873][   T27]  #1: ffff80008fdd7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4518.426527][   T27] 3 locks held by kworker/u4:8/3961:
[ 4518.426864][   T27] 3 locks held by kworker/u4:10/4037:
[ 4518.599061][   T27] 3 locks held by kworker/u4:0/4381:
[ 4518.639457][   T27]  #0: fff0000072d78d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2f0/0x33a4
[ 4518.641449][   T27]  #1: fff0000072d64548 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
[ 4518.643067][   T27]  #2: fff0000072d65e58 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5c8/0xe7c
[ 4518.644737][   T27] 2 locks held by kworker/u4:3/4394:
[ 4518.645076][   T27]  #0: 10f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4518.646720][   T27]  #1: ffff80008e837c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4518.790396][   T27] 3 locks held by kworker/u4:12/4548:
[ 4518.790795][   T27] 2 locks held by kworker/u4:13/4868:
[ 4518.791105][   T27]  #0: 10f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4518.792773][   T27]  #1: ffff80008f2a7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4518.794398][   T27] 3 locks held by kworker/u4:14/4896:
[ 4518.794790][   T27] 2 locks held by syz.9.225/5318:
[ 4518.795113][   T27] 3 locks held by kworker/u4:5/5341:
[ 4518.795449][   T27] 3 locks held by kworker/u4:6/5347:
[ 4518.795832][   T27] 2 locks held by kworker/u4:16/5475:
[ 4518.796157][   T27] 1 lock held by modprobe/5503:
[ 4518.796463][   T27] 3 locks held by kworker/u4:2/5504:
[ 4518.796787][   T27] 2 locks held by kworker/u4:13/5505:
[ 4518.982084][   T27] 
[ 4518.992207][   T27] =============================================
[ 4518.992207][   T27] 
[ 4539.501810][   T27] INFO: task syz.8.227:5328 blocked for more than 451 seconds.
[ 4539.513625][   T27]       Not tainted syzkaller #0
[ 4539.516268][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4539.539605][   T27] task:syz.8.227       state:D stack:0     pid:5328  tgid:5328  ppid:4964   task_flags:0x400040 flags:0x00000019
[ 4539.611919][   T27] Call trace:
[ 4539.612495][   T27]  __switch_to+0x584/0xb20 (T)
[ 4539.613109][   T27]  __schedule+0x1eec/0x33a4
[ 4539.613586][   T27]  schedule+0xac/0x27c
[ 4539.614085][   T27]  schedule_timeout+0x5c/0x1e4
[ 4539.614508][   T27]  do_wait_for_common+0x28c/0x444
[ 4539.614926][   T27]  wait_for_completion+0x44/0x5c
[ 4539.615438][   T27]  __synchronize_srcu+0x2a4/0x320
[ 4539.615936][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 4539.616390][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 4539.616881][   T27]  kvm_put_kvm+0x6a0/0xfa8
[ 4539.753324][   T27]  kvm_vm_release+0x58/0x78
[ 4539.753980][   T27]  __fput+0x4ac/0x980
[ 4539.754404][   T27]  ____fput+0x20/0x58
[ 4539.754814][   T27]  task_work_run+0x1bc/0x254
[ 4539.755227][   T27]  do_notify_resume+0x1bc/0x270
[ 4539.755717][   T27]  el0_svc+0xb8/0x164
[ 4539.756161][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 4539.756576][   T27]  el0t_64_sync+0x198/0x19c
[ 4539.798732][   T27] 
[ 4539.798732][   T27] Showing all locks held in the system:
[ 4539.812868][   T27] 1 lock held by khungtaskd/27:
[ 4539.818963][   T27]  #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 4539.821123][   T27] 2 locks held by getty/3186:
[ 4539.821448][   T27]  #0: a4f0000011d0e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 4539.823031][   T27]  #1: 55ff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 4539.824731][   T27] 3 locks held by kworker/u4:7/3437:
[ 4539.825099][   T27] 2 locks held by kworker/u4:0/4381:
[ 4539.825397][   T27] 2 locks held by kworker/u4:3/4394:
[ 4539.825675][   T27]  #0: 10f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4539.940499][   T27]  #1: ffff80008e837c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4539.942515][   T27] 2 locks held by syz.9.225/5318:
[ 4539.942940][   T27] 1 lock held by modprobe/5510:
[ 4539.976541][   T27] 
[ 4540.018124][   T27] =============================================
[ 4540.018124][   T27] 

VM DIAGNOSIS:
14:16:06  Registers:
info registers vcpu 0

CPU#0
 PC=ffff8000800e2fac X00=0000000000000000 X01=ffff800080008000
X02=faf000000d9b9d80 X03=0000000000000000 X04=0000000000000003
X05=0000000000000000 X06=0000000000000000 X07=ffff80008534d3c0
X08=faf000000d9b9d80 X09=0000000000000000 X10=00000000000000fa
X11=00000000000000fa X12=000000007231ce5e X13=00000000dab70e75
X14=00000000ffff8000 X15=ffff800080007708 X16=ffff800080010e20
X17=000000000000003a X18=00000000000000ff X19=efff800000000000
X20=0000000000000000 X21=ffff800081b48b1c X22=ffff8000872078c5
X23=0000000000000000 X24=fff0000071e060c0 X25=000000000000000e
X26=0000000000000000 X27=00000000000000ff X28=0000000000000000
X29=ffff800080007600 X30=ffff80008048be4c  SP=ffff800080007600
PSTATE=404020c9 -Z-- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=0000000000000000:0000000000000000 Z01=0000ffff875beb30:0000ffff875bf060
Z02=0000ffff873086e0:0000ffff873080d0 Z03=0000ffff875efd10:0000ffff875be600
Z04=0000ffff875bfad0:0000ffff875bf5a0 Z05=0000ffff873086e0:0000ffff873080d0
Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000