last executing test programs:

2h1m36.859611907s ago: executing program 32 (id=178):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x240040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
r2 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x0, &(0x7f0000000000)=0xf4020000})
ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2004001f)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000001c0)={0x10200, 0xc0, 0x3c0, 0x0})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000340)=0x11})
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33)
r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x14)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x9})
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
r14 = openat$kvm(0x0, &(0x7f0000000240), 0x428000, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x25)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000280)=0x3})
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r13, 0x8, 0x40010, r9, 0x0)

2h1m29.84924789s ago: executing program 33 (id=179):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r12, 0x8, 0x13, r11, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r12, 0x1000001, 0x12, r11, 0x0) (async)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10})
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r16, 0x3, 0x11, r8, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r16, 0x3, 0x11, r8, 0x0)

1h55m55.926415142s ago: executing program 34 (id=182):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x6000})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0x0, &(0x7f0000000180), 0xa0080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_vgic_v3_setup(r6, 0x2, 0x40)
close(r6)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
write$eventfd(r10, &(0x7f00000001c0)=0x7ffffff, 0xfdef)
close(r7)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000100)=0x500000000000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
r13 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x40)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x7, 0x1, 0x0})
r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)

1h55m51.223852038s ago: executing program 35 (id=181):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @msr={0x14, 0x20, {0x603000000013c102, 0x120000000000000}}], 0x60}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x10001})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async)
r10 = eventfd2(0x800, 0x800)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000280)={0x69, 0xffff1000}) (async)
close(0xffffffffffffffff) (async)
ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10, 0x0, 0x2}) (async)
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r12 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, 0xfffffffffffffffe) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0x8000000000000000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xc7, 0x4, &(0x7f0000000180)=0xffffffffffffffff})

1h40m34.249281276s ago: executing program 36 (id=238):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5}) (async)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
close(0xffffffffffffffff) (async)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x0, 0xffffffffffffffff, 0x8}) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f000077b000/0x2000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

1h26m18.997464754s ago: executing program 37 (id=310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0xfffffe1a, 0xfffffffffffffffc, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x6})
r8 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r0, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001140)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000001180)=[@featur2={0x1, 0xac}], 0x1)

1h22m36.433428744s ago: executing program 4 (id=326):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r3=>0xffffffffffffffff})
munmap(&(0x7f0000d2e000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x20)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000300)=0x137})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x1)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000000)={0x1, 0x300, 0x2c0, 0x0})

1h22m18.399594161s ago: executing program 4 (id=327):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x8003}}], 0xffffffffffffff32}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h22m6.64727556s ago: executing program 4 (id=328):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x5452, 0x2000fdfd)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r3, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_ccsidr={0x6020000000110003, &(0x7f00000001c0)=0x7})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000200)={0x5, 0x3, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_GET_DEVICE_ATTR_vm(r9, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x4, 0x9, &(0x7f00000000c0)=0x4})
r13 = ioctl$KVM_CREATE_VM(r12, 0x894c, 0x0)
r14 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0xcb)
ioctl$KVM_CREATE_VCPU(r13, 0xb704, 0x0)

1h21m48.447231397s ago: executing program 4 (id=329):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000140)={0xd000, 0x119000})
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x0, 0x79, 0x1}}], 0xffffffffffffffcb}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013802c}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r12 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0x8000000, 0x8, r12})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x10000, 0x1000, 0x1})

1h21m23.860662747s ago: executing program 4 (id=330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x125b02, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000b10000/0x400000)=nil) (async, rerun: 64)
syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f00000000c0)="6a829d3d0b7f519cdd5cba19730abca95bae74582abcc1b5", 0x0, 0x18) (async, rerun: 64)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0xffffffffffffffff, 0x9, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur2={0x1, 0x88}], 0x1) (async, rerun: 64)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) (async, rerun: 32)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) (async)
r18 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0)
r19 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r19, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x1, 0x0}) (async, rerun: 32)
ioctl$KVM_SET_ONE_REG(r17, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5}) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, r14, 0x1000000, 0x80010, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1h21m7.079897167s ago: executing program 4 (id=331):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x3, 0x7ffffffd}}) (async)
munmap(&(0x7f000000e000/0x1000)=nil, 0x1000) (async)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c02a, &(0x7f0000000180)})

1h20m18.071104543s ago: executing program 38 (id=331):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x3, 0x7ffffffd}}) (async)
munmap(&(0x7f000000e000/0x1000)=nil, 0x1000) (async)
r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c02a, &(0x7f0000000180)})

1h12m54.476023363s ago: executing program 7 (id=343):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x604400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000280))

1h12m41.21933414s ago: executing program 7 (id=344):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_vgic_v3_setup(r1, 0x0, 0x0)
close(0x4)
close(0x5)
munmap(&(0x7f0000db5000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0xc007000000000000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r5, 0x0, 0x4010, r2, 0x0)
munmap(&(0x7f0000e9d000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r5, 0x0, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0)

1h12m15.479171334s ago: executing program 7 (id=345):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x29)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000180)=@arm64_sve={0x608000000015036d, &(0x7f0000000200)=0xfffffffffffffffc}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000180)=@arm64_sve={0x608000000015036d, &(0x7f0000000200)=0xfffffffffffffffc})
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000004c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000001c0)=0xc5}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000004c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000001c0)=0xc5})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x8, 0x80800)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0xc0189436, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r11, 0x400454cb, 0x2f)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r8, 0x3})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) (async)
r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x1, 0x353}}, @svc={0x122, 0x40, {0x1000000, [0x6, 0x1, 0x7, 0xda3]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1c3}}, @uexit={0x0, 0x18, 0x20}, @irq_setup={0x46, 0x18, {0x6, 0x349}}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x100, [0x8, 0xffffffffffffd266, 0x401, 0x80, 0x2]}}, @eret={0xe6, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x4, 0x343}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013df45}}, @msr={0x14, 0x20, {0x603000000013da21, 0x2}}, @code={0xa, 0x9c, {"20d59bd20020b8f2210180d2c20080d2230080d2040180d2020000d4007008d5e0039f5a008c007f008008d5c01c87d20040b0f2e10180d2820080d2430080d2240080d2020000d4008008d500f28bd20040b8f2c10180d2a20180d2630080d2840180d2020000d4002c200e00e392d20080b0f2410080d2420080d2430080d2e40180d2020000d4"}}, @svc={0x122, 0x40, {0xd2800211, [0x800000, 0x8000, 0x40, 0x2, 0x6b5]}}, @uexit={0x0, 0x18, 0xc}], 0x27c}, &(0x7f0000000100)=[@featur2={0x1, 0x54}], 0x1)
openat$kvm(0x0, 0x0, 0x1, 0x0) (async)
openat$kvm(0x0, 0x0, 0x1, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x20)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000a67000/0x400000)=nil) (async)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000a67000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

1h11m58.380950375s ago: executing program 7 (id=346):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000008000/0x2000)=nil, 0x930, 0x280000b, 0x810, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r4, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000008000/0x2000)=nil, 0x930, 0x280000b, 0x810, r2, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
eventfd2(0x0, 0x0) (async)
close(r4) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r4, 0x0) (async)

1h11m40.323574245s ago: executing program 7 (id=347):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe7) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x1, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0x84000012, [0xffffffffffffffff, 0x35e378c9, 0x7fd, 0x5, 0x8]}}], 0x40}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x5000}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r15, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x3, 0x7ffffffd}})

1h11m13.95057138s ago: executing program 7 (id=348):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xab)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x8030aeb4, &(0x7f0000000040)=@attr_other={0x0, 0x9, 0x6, &(0x7f00000001c0)=0x58})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000100), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r10 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x6c, &(0x7f00000002c0)=0x2c172c22})
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0x80111500, 0x20000000)
write$eventfd(r12, &(0x7f0000000040), 0x8)
r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)={0x3, 0x0, [{0x1, 0x4, 0x1, 0x0, @adapter={0xa, 0x8, 0xdcd7, 0x83464f51, 0x2101}}, {0x5, 0x3, 0x0, 0x0, @msi={0x8, 0xf, 0x3ac, 0x2}}, {0x9, 0x0, 0x0, 0x0, @irqchip={0x9, 0x8}}]})
ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x4, &(0x7f0000000000)=0x8000})
ioctl$KVM_INTERRUPT(r15, 0x4004ae86, &(0x7f0000000080)=0x3)

1h11m5.846835708s ago: executing program 8 (id=332):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x40086602, 0x20000000)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5})

1h10m24.749453185s ago: executing program 39 (id=348):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xab)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x8030aeb4, &(0x7f0000000040)=@attr_other={0x0, 0x9, 0x6, &(0x7f00000001c0)=0x58})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000100), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r10 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x6c, &(0x7f00000002c0)=0x2c172c22})
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0x80111500, 0x20000000)
write$eventfd(r12, &(0x7f0000000040), 0x8)
r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)={0x3, 0x0, [{0x1, 0x4, 0x1, 0x0, @adapter={0xa, 0x8, 0xdcd7, 0x83464f51, 0x2101}}, {0x5, 0x3, 0x0, 0x0, @msi={0x8, 0xf, 0x3ac, 0x2}}, {0x9, 0x0, 0x0, 0x0, @irqchip={0x9, 0x8}}]})
ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x4, &(0x7f0000000000)=0x8000})
ioctl$KVM_INTERRUPT(r15, 0x4004ae86, &(0x7f0000000080)=0x3)

1h10m14.236514555s ago: executing program 40 (id=332):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x40086602, 0x20000000)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5})

59m3.496596975s ago: executing program 1 (id=355):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)

58m44.7333625s ago: executing program 1 (id=356):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5d)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000be7000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xc5000020, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000100)={0x0, &(0x7f0000000800)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x8000000003eb0, 0xd}}, @its_send_cmd={0xaa, 0x28, {0xe, 0xfc, 0x8, 0x2, 0x9, 0xd, 0x3}}, @hvc={0x32, 0x40, {0x84000052, [0x0, 0x7fff, 0x40000000001, 0x4, 0x86]}}, @irq_setup={0x46, 0x18, {0x3, 0x33d}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0x900000, 0x102]}}, @svc={0x122, 0x40, {0x80000102, [0x69, 0x3ff, 0x1, 0x6, 0x100002]}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x80}}, @smc={0x1e, 0x40, {0x84000005, [0x2, 0x1, 0x5, 0xab, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0xc, 0x2a, 0x6b1237b6, 0x2}}, @svc={0x122, 0x40, {0x80000000, [0x5, 0x4, 0x6, 0x9, 0x3]}}, @msr={0x14, 0x20, {0x603000000013803e, 0x6}}, @svc={0x122, 0x40, {0x8100000d, [0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x7c8, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x6, 0x5}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x660, 0xe3, 0x1}}, @hvc={0x32, 0x40, {0x0, [0xe81, 0x900000000000000, 0x6, 0x2, 0xc3]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0x5, 0x6, 0xfffff800, 0x2}}, @eret={0xe6, 0x18}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x81}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xff}}, @msr={0x14, 0x20, {0x20640cd258160463, 0x3}}, @msr={0x14, 0x20, {0x603000000013e088, 0x400}}, @hvc={0x32, 0x40, {0x84000000, [0x1, 0x100000001, 0x6, 0x9, 0x3]}}, @eret={0xe6, 0x18, 0x4}, @mrs={0xbe, 0x18, {0x6030000000138054}}, @its_setup={0x82, 0x28, {0x0, 0x2002, 0x319}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x3, 0x4, 0x2000008c, 0x5b9953d3, 0x2}}, @svc={0x122, 0x40, {0x84000006, [0x0, 0x6, 0x1ff, 0x400, 0x80]}}, @hvc={0x32, 0x40, {0xc4000011, [0x7, 0x3, 0x80000000, 0x1, 0x5]}}], 0x518}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
close(r0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df19, &(0x7f0000000280)=0x1})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

58m25.028374727s ago: executing program 1 (id=357):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x680000c, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x1}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x62}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x120}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r13, 0x3, 0xa0) (async, rerun: 32)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)

58m11.506896386s ago: executing program 1 (id=358):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6})
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

57m52.418514299s ago: executing program 1 (id=359):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x101800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000700)={0x7, <r5=>0xffffffffffffffff}) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000200)=@attr_other={0x0, 0x7, 0xc0, &(0x7f0000000280)=0x1}) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f00000000c0)=0x1})

57m25.892824831s ago: executing program 1 (id=360):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013df48, &(0x7f0000000040)=0x2})
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x83) (async)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010002a, &(0x7f00000000c0)=0xc})

56m36.3100551s ago: executing program 41 (id=360):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013df48, &(0x7f0000000040)=0x2})
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x83) (async)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010002a, &(0x7f00000000c0)=0xc})

36m48.127056641s ago: executing program 0 (id=400):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000300)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000140)=0x1000})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x1})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001})
r9 = eventfd2(0x5, 0x82d969bd6afd86d0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r9, 0x3})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r14, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, <r17=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r12, 0x0)

36m28.949060887s ago: executing program 9 (id=401):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x9, 0x1, &(0x7f0000000180)=0x807fffe})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000000)={0x9, 0x8080000})

36m18.354874404s ago: executing program 0 (id=402):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d96000200000001000000030000000000000004000000000000003200000000000000400000000000000052000084"], 0x80}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000180)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000140)=0x17}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x1, 0x1ff}}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

36m9.709919468s ago: executing program 9 (id=403):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2c)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, 0x0})
r9 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x1, 0xe, 0xeb, 0x1000}}], 0x28}, &(0x7f0000000300)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000200)={0x1, 0x2000, 0x1})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r15 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) (async)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013deed}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r18, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x100}})
ioctl$KVM_RUN(r18, 0xae80, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r19 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r19, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x227, 0x2, &(0x7f00000000c0)=0x2})

35m57.388551948s ago: executing program 0 (id=404):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x20000, 0x0)
write$eventfd(r4, &(0x7f0000000100)=0x6, 0x8)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, 0xffffffffffffffff, 0x3})
ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000001)

35m44.336581219s ago: executing program 9 (id=405):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x83)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async, rerun: 32)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async, rerun: 32)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async, rerun: 32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r3, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e9d000/0x1000)=nil, 0x1000) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r3, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0)

35m38.098570349s ago: executing program 0 (id=406):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x4c8500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xc3033, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, <r2=>0xffffffffffffffff})
syz_kvm_vgic_v3_setup(r1, 0x2, 0x2c0) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0xfffffffffffffff9, 0x0})

35m27.333532336s ago: executing program 9 (id=407):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000480)={0x3, 0x8})
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9e)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x4, 0x220)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f00000004c0)}, &(0x7f0000000440)=[@featur1={0x1, 0xa0}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r4, 0xe, 0x10, r14, 0x0)

35m23.969637365s ago: executing program 0 (id=408):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x731100, 0x0)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r3 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000280)=0x5})
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)

35m4.373107609s ago: executing program 0 (id=409):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x800})
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r3, 0x6000006, 0x20010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="65f5fc799601439736f5c80572f2a066147ac63abd8ab660eeb6539188810c01e5b23cba53f518ff5a86f4c42b54db2fd74959a3de5d95ca619adaa14d8f7b56710171d4c2d140ec", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000002c0)={0x8084004, 0x102000})
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r5, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x6, 0x800, 0x5188, 0x2}}, @smc={0x1e, 0x40, {0x84000053, [0x3, 0x0, 0xe4, 0x0, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0x10, 0x6, 0x100, 0x4}}, @code={0xa, 0x6c, {"007008d5000028d5007008d50004c078402f9dd200c0b0f2410180d2e20080d2a30080d2640180d2020000d4603e9ad20040b0f2610180d2620180d2230180d2440180d2020000d4009c005f0000003a008008d50020000f"}}, @code={0xa, 0xb4, {"0000005e0008a03860db9fd20080b0f2810080d2c20180d2230180d2440180d2020000d400848cd200a0b8f2010180d2020180d2a30180d2c40180d2020000d460a39dd20040b8f2810080d2e20080d2e30080d2840080d2020000d440ee85d20060b0f2a10180d2020180d2630080d2e40080d2020000d4007008d50084205e40e499d20040b8f2a10080d2420180d2430180d2e40180d2020000d4007008d5"}}], 0x1b0}], 0x1, 0x0, &(0x7f0000000200)=[@featur2={0x1, 0x42}], 0x1)

35m0.768933022s ago: executing program 9 (id=410):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@mrs={0xbe, 0x18, {0x603000000013c520}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r1, 0x4020aeae, &(0x7f0000000040)={0x2, 0x8a})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f)
r6 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r8, 0x300000a, 0x8010, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

34m38.376378977s ago: executing program 9 (id=411):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x9, 0x1, &(0x7f0000000180)=0x807fffe})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000540)=[{0x0, 0x0, 0x51c}], 0x1, 0x0, 0x0, 0x0)

34m15.230337853s ago: executing program 42 (id=409):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x800})
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r3, 0x6000006, 0x20010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="65f5fc799601439736f5c80572f2a066147ac63abd8ab660eeb6539188810c01e5b23cba53f518ff5a86f4c42b54db2fd74959a3de5d95ca619adaa14d8f7b56710171d4c2d140ec", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000002c0)={0x8084004, 0x102000})
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r5, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x6, 0x800, 0x5188, 0x2}}, @smc={0x1e, 0x40, {0x84000053, [0x3, 0x0, 0xe4, 0x0, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0x10, 0x6, 0x100, 0x4}}, @code={0xa, 0x6c, {"007008d5000028d5007008d50004c078402f9dd200c0b0f2410180d2e20080d2a30080d2640180d2020000d4603e9ad20040b0f2610180d2620180d2230180d2440180d2020000d4009c005f0000003a008008d50020000f"}}, @code={0xa, 0xb4, {"0000005e0008a03860db9fd20080b0f2810080d2c20180d2230180d2440180d2020000d400848cd200a0b8f2010180d2020180d2a30180d2c40180d2020000d460a39dd20040b8f2810080d2e20080d2e30080d2840080d2020000d440ee85d20060b0f2a10180d2020180d2630080d2e40080d2020000d4007008d50084205e40e499d20040b8f2a10080d2420180d2430180d2e40180d2020000d4007008d5"}}], 0x1b0}], 0x1, 0x0, &(0x7f0000000200)=[@featur2={0x1, 0x42}], 0x1)

33m49.404201351s ago: executing program 43 (id=411):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x9, 0x1, &(0x7f0000000180)=0x807fffe})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000540)=[{0x0, 0x0, 0x51c}], 0x1, 0x0, 0x0, 0x0)

19m59.999078909s ago: executing program 3 (id=437):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a1e000/0x400000)=nil)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x8, 0x80800)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140001, &(0x7f0000000000)=0x7})
r11 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x7ffffffffffffffe, 0x1000, 0x8, r11})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r6, 0x3})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r6, 0x3})
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r13 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r12, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000240)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

19m41.631114822s ago: executing program 2 (id=439):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a67000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100030, &(0x7f0000000040)=0x40})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x83)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a67000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100030, &(0x7f0000000040)=0x40}) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x83) (async)

19m32.446863559s ago: executing program 3 (id=440):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000040)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140000, &(0x7f0000000000)=0x10002})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000080)={0x6, 0x9})
syz_kvm_assert_reg(r8, 0x8006, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
r13 = openat$kvm(0x0, &(0x7f00000001c0), 0x1, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f00009ab000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x20})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf)
close(r1)
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r19 = syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r19, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)

19m21.639787062s ago: executing program 2 (id=441):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0x541b, 0x2000001c)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

19m3.348679689s ago: executing program 2 (id=442):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21)
close(0xffffffffffffffff)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000f40000/0x14000)=nil, 0x930, 0x1, 0x8010, r10, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x703000, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r14, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0x4030582a, 0x2)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ef0000/0x4000)=nil, 0x0, 0x2000008, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x39)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x3d)

19m2.382225388s ago: executing program 3 (id=443):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x58c83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000340)={0x5}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0xffffffd3)
r6 = eventfd2(0x0, 0x80000)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) (async, rerun: 64)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1000000000000000) (async, rerun: 64)
r11 = eventfd2(0x5, 0x1) (rerun: 64)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r11, 0x8}) (async)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r6, 0x3})
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x200000000000327}}], 0x28}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

18m41.750429416s ago: executing program 3 (id=444):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0xeeee0000, 0x4000, 0x1})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x1, 0x4})
r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000003c0)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013dee4}}, @mrs={0xbe, 0x18, {0x6030000000138005}}, @uexit={0x0, 0x18, 0xb55000000000000}, @eret={0xe6, 0x18, 0x1}, @svc={0x122, 0x40, {0x4000000, [0xfffffffffffffffd, 0x7, 0x1, 0x7f, 0x1]}}, @svc={0x122, 0x40, {0xc4000012, [0x7, 0x8, 0x8, 0x8, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013803f}}, @code={0xa, 0x6c, {"007795d200c0b8f2010180d2220080d2830180d2a40180d2020000d4008008d50050204e000040ac000008d5008008d500a4006fe07497d20000b0f2610080d2420080d2630180d2e40180d2020000d4007008d50080c008"}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x6030000000139828}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xd00, 0x3ce0, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0xa, 0xd, 0x3, 0x2}}, @msr={0x14, 0x20, {0x603000000013e200, 0x7}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0xe, 0x9, 0x3ff, 0x3}}, @irq_setup={0x46, 0x18, {0x3, 0x25b}}, @eret={0xe6, 0x18, 0x8000}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x4, 0x5, 0x2, 0x1}}, @uexit={0x0, 0x18, 0x8}, @eret={0xe6, 0x18, 0x8}, @msr={0x14, 0x20, {0x603000000013c4d1, 0x7fffffffffffffff}}], 0x2dc}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x15)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000440)={0x3000, 0x1000})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ff7000/0x6000)=nil, r6, 0x8, 0x8010, r5, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000480))
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3ff)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x24)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a77000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000004c0)={0x6, <r8=>0xffffffffffffffff})
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000500)={0x1000, 0x110000, 0x1})
ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000540)=0x2)
ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000005c0)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000580)=0x1})
syz_kvm_setup_cpu$arm64(r4, r3, &(0x7f0000bd3000/0x400000)=nil, &(0x7f0000000a80)=[{0x0, &(0x7f0000000600)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x16c}}, @smc={0x1e, 0x40, {0x4000000, [0x9, 0x400, 0x401, 0xffff, 0x48]}}, @code={0xa, 0xb4, {"e0fa90d20040b0f2810180d2420180d2c30180d2e40080d2020000d440d290d20000b8f2410180d2a20180d2030180d2e40180d2020000d4e04a90d200c0b8f2810180d2620080d2c30180d2640180d2020000d4805e90d200c0b8f2010180d2620180d2430180d2240180d2020000d4007008d540e987d20060b8f2610180d2020180d2a30180d2440080d2020000d4000028d5007008d500008052000008d5"}}, @svc={0x122, 0x40, {0xc5000021, [0x9, 0x2, 0x2, 0x200, 0x1]}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0xc07, 0xbfaf, 0x5}}, @mrs={0xbe, 0x18, {0x301800000009b92a}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x7, 0x9, 0xe, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x23}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x0, 0x200, 0xfff, 0x4}}, @svc={0x122, 0x40, {0x200, [0x6, 0x200, 0x1, 0x5, 0x9]}}, @smc={0x1e, 0x40, {0x80007fff, [0x0, 0x10, 0x401, 0x401, 0x4]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x5}}, @hvc={0x32, 0x40, {0x84000053, [0x1b5d608, 0x9, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e609, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x3, 0x4, 0xffffff46, 0x7, 0x2}}, @hvc={0x32, 0x40, {0xc4000011, [0x140000, 0x10001, 0x2, 0x3, 0x8000000000000001]}}, @hvc={0x32, 0x40, {0x8400000c, [0x8, 0x2, 0x6, 0x7, 0x3]}}, @uexit={0x0, 0x18, 0x7ff}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0xc45, 0xffffffffffffffff, 0x8}}, @smc={0x1e, 0x40, {0xddadb3a5f0610f2c, [0x0, 0x1, 0x2a7933d1, 0xfffffffff1765fb7, 0xfffffffffffff000]}}], 0x45c}], 0x1, 0x0, &(0x7f0000000ac0)=[@featur2], 0x1)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000d40)={0x0, &(0x7f0000000b00)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0xffffffff}}, @hvc={0x32, 0x40, {0x84000012, [0x8, 0xa2, 0x7, 0x7, 0x7]}}, @irq_setup={0x46, 0x18, {0x0, 0x189}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x100000001}}, @smc={0x1e, 0x40, {0x1, [0xfffffffffffffff8, 0x101, 0x3, 0x7, 0x8]}}, @uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0xc4000012, [0x4, 0x400, 0x1, 0x4, 0xcaea]}}, @svc={0x122, 0x40, {0x1, [0x9, 0x2, 0x2, 0x10000, 0x400]}}, @smc={0x1e, 0x40, {0x84000012, [0x8000000000000000, 0x5, 0x3ff, 0xc5af, 0x3b443cc]}}, @svc={0x122, 0x40, {0x84000012, [0x660, 0x8, 0x3, 0x80, 0x9]}}], 0x210}, &(0x7f0000000d80)=[@featur2], 0x1)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7f)
ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000000dc0)={0x10002, 0x0, &(0x7f0000e99000/0x4000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000e00)=@arm64={0xfa, 0x5, 0x49})
r12 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000f40)={0x0, &(0x7f0000000e40)=[@mrs={0xbe, 0x18, {0x603000000013801d}}, @svc={0x122, 0x40, {0x40000000, [0x0, 0x0, 0x2, 0x37, 0x9]}}, @smc={0x1e, 0x40, {0x31000000, [0x7aac, 0x401, 0x80000000, 0x0, 0xff]}}, @irq_setup={0x46, 0x18, {0x1, 0x260}}, @msr={0x14, 0x20, {0x60300000001383ce, 0x40}}, @mrs={0xbe, 0x18, {0x603000000013e6c1}}, @eret={0xe6, 0x18, 0x2}], 0x100}, &(0x7f0000000f80)=[@featur1={0x1, 0x52}], 0x1)
ioctl$KVM_GET_REG_LIST(r12, 0xc008aeb0, &(0x7f0000000fc0)={0x2, [0x8, 0x3]})

18m39.503750046s ago: executing program 2 (id=445):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async)
r4 = eventfd2(0x3, 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r7}) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x8000, 0x3, r7}) (async)
r8 = eventfd2(0x1, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r8, 0x3}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$eventfd(r8, &(0x7f0000000100)=0x800, 0x8)

18m19.334798908s ago: executing program 2 (id=446):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, 0x0})
close(r2)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1ff})
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000cec000/0x4000)=nil, r11, 0x2000014, 0x10010, r2, 0x0)
close(r1)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x8440, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r14, 0x0)
r15 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r13, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

18m16.799324488s ago: executing program 3 (id=447):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x5452, 0xa00000000000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x5452, 0x2000fdfd)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x4, 0x2, 0x9, 0x4}}, @eret={0xe6, 0x18, 0xe}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffb}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

17m53.538786948s ago: executing program 2 (id=448):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000000)={0x527, 0x7fffffffffffffff})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0xfffffffffffffffe)

17m51.800826686s ago: executing program 3 (id=449):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0, 0x24}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17m5.561012103s ago: executing program 44 (id=448):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000000)={0x527, 0x7fffffffffffffff})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0xfffffffffffffffe)

16m57.380155022s ago: executing program 45 (id=449):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0, 0x24}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

2m46.45250059s ago: executing program 5 (id=483):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r2})
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x4, 0x80a0000, 0x4, r2})
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0xfffffffffffffeff}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m33.192914426s ago: executing program 5 (id=485):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x40401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, 0xfffffffffffffffe)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000200), 0x180, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x2c8441, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000002c0)={0x7})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x8, 0x1, &(0x7f0000000340)=0x81})
openat$kvm(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x80000000})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x40305828, &(0x7f0000000240)=@attr_other={0x0, 0x7, 0x88000000, &(0x7f00000001c0)=0x40})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3b)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0xc)
r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00009c3000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffa5}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xac570400b29e9a46, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x100, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x11)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f00007bb000/0x3000)=nil, 0x930, 0x0, 0x32, r9, 0x0)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1)

2m20.522056718s ago: executing program 6 (id=486):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8})
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xffffffc0, 0x1, &(0x7f0000000040)=0x6})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x5, 0xfffffffe, 0x0, 0xfffffffd, 0x79}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m10.100442814s ago: executing program 5 (id=487):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @mrs={0xbe, 0x18, {0x6030000000138056}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x1d}}], 0x58}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r5, 0x603000000013df11, 0x8000)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xfffffffffffffffc})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7})
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0xc0189436, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r11, 0x400454cb, 0x2f)
r12 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)

2m7.035174657s ago: executing program 6 (id=488):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f000096c000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=[@featur2={0x1, 0x24}], 0x1)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r1, 0x20000000000, 0x60)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x30})

1m50.448288321s ago: executing program 6 (id=489):
munmap(&(0x7f0000c8f000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xd6, 0xe, 0x1}})
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r9, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610f3ff67521cd66f8f1f447d35b20700000000000000000000000100", 0x0, 0x48)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x10)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

1m43.79056754s ago: executing program 5 (id=490):
openat$kvm(0x0, &(0x7f0000000140), 0x41, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c03a, &(0x7f00000000c0)=0x6})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff})
r8 = ioctl$KVM_CREATE_VM(r7, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0x40305839, 0xfffffffffffffffc)
ioctl$KVM_CHECK_EXTENSION(r4, 0xc020660b, 0xe1)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2c)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r13, &(0x7f0000bfe000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r17, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r17, 0x4040aea0, &(0x7f0000000000)=@x86={0x7f, 0x2, 0x9, 0x0, 0x7, 0x2, 0x2, 0x4, 0x4, 0xb, 0x0, 0x4, 0x0, 0x468, 0xd20, 0x7, 0x8, 0x4, 0x6, '\x00', 0xd, 0x5})

1m26.739171652s ago: executing program 6 (id=491):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0xf}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000080)=0xbced})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x9, &(0x7f0000000000)=0x8000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m17.936806737s ago: executing program 5 (id=492):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r4, 0x8})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r4, 0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x7000000, r4, 0x6})
r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x400, 0x3, r5})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=[@featur2={0x1, 0x56}], 0x1)
r9 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x200)

1m8.830711854s ago: executing program 6 (id=493):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x801c581f, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xc5000020, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0x801c581f, 0x0) (async)
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xc5000020, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)

1m1.426563592s ago: executing program 5 (id=494):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffd0, 0x2, 0xc}}], 0x70}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x4, 0x0})
r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000240)=0x100})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r11 = openat$kvm(0x0, &(0x7f0000000100), 0x101200, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x34)
ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0xef)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000300)=[{0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1e0}], 0x1, 0x0, &(0x7f0000000000)=[@featur1={0x1, 0x20}], 0x1)

50.195610011s ago: executing program 6 (id=495):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r2}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x6, 0x0, 0x0, r2, 0x4}) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async)
r5 = openat$kvm(0x0, 0x0, 0x141543, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110e22ffff) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r8, 0x2, 0x100)
r11 = eventfd2(0x1, 0x80001)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0x3}) (async)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
eventfd2(0xfffffffa, 0x80001)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) (async)
ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e227ffe) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)

14.29023622s ago: executing program 46 (id=494):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffd0, 0x2, 0xc}}], 0x70}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x4, 0x0})
r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000240)=0x100})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r11 = openat$kvm(0x0, &(0x7f0000000100), 0x101200, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x34)
ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0xef)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000300)=[{0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="82000000000000002800000000000000000000000000000004000000000000004400000000000000e6000000000000001800000000000000ff0f0000000000008200000000000000280000000000000003000000000000000300000000000000000200000000000022010000000000004000000000000000010000860000000000000000002400000200000000000000090000000000000040000000000000004000000062000000be00000000000000180000c21300000030604600000000000000180000000000000003000000140100005e000000000000004000000000000000080000000000000007000000000000000b000000000000000000000000000000020000000000000003000000000000006e00000000000000300000000000000000001008000000000003000000000000010400000000000001000000000000001e0000000000000040000000000000000d00000800000000a0090000000000000000000000000000e400000000000005000000000000001e000000000000004000000000000000538000800000000005000000000000004000000000000000ff03000000000000efd90000000000000000000000000000be0b00000000000000180000000000000001d813000000306066c87641723de80e55290c84097373c8bfc461298f65f91fe0a952aa0cd19f22fe7f0dbb7150d6c9d3546c3be57b995ec69cd6cedfc7d95f83d676748cfb"], 0x1e0}], 0x1, 0x0, &(0x7f0000000000)=[@featur1={0x1, 0x20}], 0x1)

0s ago: executing program 47 (id=495):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r2}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x6, 0x0, 0x0, r2, 0x4}) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async)
r5 = openat$kvm(0x0, 0x0, 0x141543, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110e22ffff) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r8, 0x2, 0x100)
r11 = eventfd2(0x1, 0x80001)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0x3}) (async)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
eventfd2(0xfffffffa, 0x80001)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) (async)
ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e227ffe) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)

kernel console output (not intermixed with test programs):

[  383.519050][ T3156] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.133009][ T3156] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:5367' (ED25519) to the list of known hosts.
[  598.005462][   T25] audit: type=1400 audit(597.220:61): avc:  denied  { name_bind } for  pid=3309 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  599.886908][   T25] audit: type=1400 audit(599.100:62): avc:  denied  { execute } for  pid=3310 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  599.913081][   T25] audit: type=1400 audit(599.130:63): avc:  denied  { execute_no_trans } for  pid=3310 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  620.081517][   T25] audit: type=1400 audit(619.300:64): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  620.120075][   T25] audit: type=1400 audit(619.330:65): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  620.204920][ T3310] cgroup: Unknown subsys name 'net'
[  620.252386][   T25] audit: type=1400 audit(619.470:66): avc:  denied  { unmount } for  pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  620.660984][ T3310] cgroup: Unknown subsys name 'cpuset'
[  620.762554][ T3310] cgroup: Unknown subsys name 'rlimit'
[  621.690634][   T25] audit: type=1400 audit(620.910:67): avc:  denied  { setattr } for  pid=3310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  621.717839][   T25] audit: type=1400 audit(620.930:68): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  621.736268][   T25] audit: type=1400 audit(620.950:69): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  622.918263][ T3313] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  622.938930][   T25] audit: type=1400 audit(622.150:70): avc:  denied  { relabelto } for  pid=3313 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  622.975178][   T25] audit: type=1400 audit(622.180:71): avc:  denied  { write } for  pid=3313 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  623.148221][   T25] audit: type=1400 audit(622.360:72): avc:  denied  { read } for  pid=3310 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  623.162439][   T25] audit: type=1400 audit(622.380:73): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  623.210075][ T3310] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  674.348614][   T25] audit: type=1400 audit(673.570:74): avc:  denied  { execmem } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  679.068178][   T25] audit: type=1400 audit(678.290:75): avc:  denied  { read } for  pid=3316 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  679.085845][   T25] audit: type=1400 audit(678.300:76): avc:  denied  { open } for  pid=3316 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  679.158790][   T25] audit: type=1400 audit(678.360:77): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  679.421601][   T25] audit: type=1400 audit(678.640:79): avc:  denied  { module_request } for  pid=3316 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  679.440889][   T25] audit: type=1400 audit(678.630:78): avc:  denied  { module_request } for  pid=3317 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  680.536483][   T25] audit: type=1400 audit(679.750:80): avc:  denied  { sys_module } for  pid=3317 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  709.657426][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.037100][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.118679][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.335544][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.335240][ T3316] hsr_slave_0: entered promiscuous mode
[  722.366222][ T3316] hsr_slave_1: entered promiscuous mode
[  723.335135][ T3317] hsr_slave_0: entered promiscuous mode
[  723.370504][ T3317] hsr_slave_1: entered promiscuous mode
[  723.417432][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[  723.449420][ T3317] Cannot create hsr debugfs directory
[  728.687387][   T25] audit: type=1400 audit(727.900:81): avc:  denied  { create } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  728.725686][   T25] audit: type=1400 audit(727.940:82): avc:  denied  { write } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  728.827887][   T25] audit: type=1400 audit(728.050:83): avc:  denied  { read } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  728.970626][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  729.446407][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  729.671377][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  729.978297][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  731.436301][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  731.600531][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  731.748854][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  732.055175][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  749.028342][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[  751.468059][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.449652][ T3316] veth0_vlan: entered promiscuous mode
[  807.939110][ T3316] veth1_vlan: entered promiscuous mode
[  809.747376][ T3316] veth0_macvtap: entered promiscuous mode
[  810.162262][ T3317] veth0_vlan: entered promiscuous mode
[  810.241015][ T3316] veth1_macvtap: entered promiscuous mode
[  811.007294][ T3317] veth1_vlan: entered promiscuous mode
[  812.693062][ T2120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  812.712717][ T2120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  812.749797][ T2120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  812.757272][ T2120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  813.877225][ T3317] veth0_macvtap: entered promiscuous mode
[  814.549200][ T3317] veth1_macvtap: entered promiscuous mode
[  815.235755][   T25] audit: type=1400 audit(814.430:84): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  815.575297][   T25] audit: type=1400 audit(814.680:85): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.LaqO1N/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  815.764294][   T25] audit: type=1400 audit(814.980:86): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  816.126050][   T25] audit: type=1400 audit(815.340:87): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.LaqO1N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  816.360700][   T25] audit: type=1400 audit(815.530:88): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.LaqO1N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  817.024929][ T3416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.036241][ T3416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  817.085152][ T3416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  817.098848][ T3389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  817.220443][   T25] audit: type=1400 audit(816.430:89): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  817.615505][   T25] audit: type=1400 audit(816.830:90): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  817.828843][   T25] audit: type=1400 audit(816.950:91): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  818.286369][   T25] audit: type=1400 audit(817.500:92): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  818.444610][   T25] audit: type=1400 audit(817.660:93): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  820.338715][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  821.896518][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  821.908608][   T25] audit: type=1400 audit(821.110:95): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  821.955122][   T25] audit: type=1400 audit(821.170:96): avc:  denied  { open } for  pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  822.025580][   T25] audit: type=1400 audit(821.220:97): avc:  denied  { ioctl } for  pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  833.642208][   T25] audit: type=1400 audit(832.860:98): avc:  denied  { read } for  pid=3474 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  833.690295][   T25] audit: type=1400 audit(832.910:99): avc:  denied  { open } for  pid=3474 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  834.425232][   T25] audit: type=1400 audit(833.630:100): avc:  denied  { ioctl } for  pid=3474 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  911.428259][   T25] audit: type=1400 audit(910.650:101): avc:  denied  { execute } for  pid=3523 comm="syz.1.11" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  914.497897][   T25] audit: type=1400 audit(913.710:102): avc:  denied  { append } for  pid=3524 comm="syz.0.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  920.947386][   T25] audit: type=1400 audit(920.120:103): avc:  denied  { write } for  pid=3530 comm="syz.1.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1124.838419][ T3665] kvm [3665]: Failed to find VMA for hva 0x21016000
[ 1181.489838][   T25] audit: type=1400 audit(1180.710:104): avc:  denied  { execute } for  pid=3708 comm="syz.0.64" path="/30/T" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1189.874477][   T25] audit: type=1400 audit(1189.090:105): avc:  denied  { setattr } for  pid=3714 comm="syz.0.66" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1374.194663][   T25] audit: type=1400 audit(1373.370:106): avc:  denied  { map } for  pid=3827 comm="syz.0.102" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1374.259614][   T25] audit: type=1400 audit(1373.450:107): avc:  denied  { execute } for  pid=3827 comm="syz.0.102" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1645.888642][ T4000] debugfs: 'vgic-its-state@8080000' already exists in '4000-5'
[ 1833.220422][ T2120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.971224][ T2120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1834.900769][ T2120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1835.718988][ T2120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1851.079965][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.232034][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.337393][ T2120] bond0 (unregistering): Released all slaves
[ 1853.035827][ T2120] hsr_slave_0: left promiscuous mode
[ 1853.106252][ T2120] hsr_slave_1: left promiscuous mode
[ 1853.518541][ T2120] veth1_macvtap: left promiscuous mode
[ 1853.537748][ T2120] veth0_macvtap: left promiscuous mode
[ 1853.566762][ T2120] veth1_vlan: left promiscuous mode
[ 1853.585869][ T2120] veth0_vlan: left promiscuous mode
[ 1870.107665][ T2120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1871.023085][ T2120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1872.868196][ T2120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.565671][ T2120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.299198][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1887.401160][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1887.497896][ T2120] bond0 (unregistering): Released all slaves
[ 1888.807753][ T2120] hsr_slave_0: left promiscuous mode
[ 1888.885585][ T2120] hsr_slave_1: left promiscuous mode
[ 1889.596363][ T2120] veth1_macvtap: left promiscuous mode
[ 1889.597718][ T2120] veth0_macvtap: left promiscuous mode
[ 1889.608445][ T2120] veth1_vlan: left promiscuous mode
[ 1889.636694][ T2120] veth0_vlan: left promiscuous mode
[ 1901.977417][ T4087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1902.348895][ T4087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1916.609519][ T4094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1916.868192][ T4094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1928.399685][ T4087] hsr_slave_0: entered promiscuous mode
[ 1928.459519][ T4087] hsr_slave_1: entered promiscuous mode
[ 1939.451869][ T4094] hsr_slave_0: entered promiscuous mode
[ 1939.501707][ T4094] hsr_slave_1: entered promiscuous mode
[ 1939.541381][ T4094] debugfs: 'hsr0' already exists in 'hsr'
[ 1939.545058][ T4094] Cannot create hsr debugfs directory
[ 1941.911017][ T4087] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1942.250811][ T4087] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1942.522624][ T4087] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1943.369986][ T4087] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1952.601463][ T4094] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1952.949216][ T4094] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1953.232898][ T4094] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1953.605058][ T4094] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1967.591854][ T4087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1978.227867][ T4094] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2064.291844][ T4087] veth0_vlan: entered promiscuous mode
[ 2065.037857][ T4087] veth1_vlan: entered promiscuous mode
[ 2067.639166][ T4087] veth0_macvtap: entered promiscuous mode
[ 2068.138488][ T4087] veth1_macvtap: entered promiscuous mode
[ 2070.891998][ T4216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2070.896688][ T4216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2070.897663][ T4216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2070.898496][ T4216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.634092][ T4094] veth0_vlan: entered promiscuous mode
[ 2076.498762][ T4094] veth1_vlan: entered promiscuous mode
[ 2079.402911][ T4094] veth0_macvtap: entered promiscuous mode
[ 2080.009863][ T4094] veth1_macvtap: entered promiscuous mode
[ 2083.520238][ T3857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.545614][ T3857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.716619][ T3857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.748279][ T3857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2162.567230][ T3667] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2164.649053][ T3667] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2166.509350][ T3667] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2168.406340][ T3667] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2193.642666][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2193.826594][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2193.959310][ T3667] bond0 (unregistering): Released all slaves
[ 2197.985003][ T3667] hsr_slave_0: left promiscuous mode
[ 2198.055811][ T3667] hsr_slave_1: left promiscuous mode
[ 2198.796244][ T3667] veth1_macvtap: left promiscuous mode
[ 2198.804954][ T3667] veth0_macvtap: left promiscuous mode
[ 2198.821207][ T3667] veth1_vlan: left promiscuous mode
[ 2198.839136][ T3667] veth0_vlan: left promiscuous mode
[ 2225.050732][ T3667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2226.451339][ T3667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2227.891718][ T3667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2228.961360][ T3667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2243.471598][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2243.550482][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2243.635437][ T3667] bond0 (unregistering): Released all slaves
[ 2244.878257][ T3667] hsr_slave_0: left promiscuous mode
[ 2244.985568][ T3667] hsr_slave_1: left promiscuous mode
[ 2245.358349][ T3667] veth1_macvtap: left promiscuous mode
[ 2245.361644][ T3667] veth0_macvtap: left promiscuous mode
[ 2245.379524][ T3667] veth1_vlan: left promiscuous mode
[ 2245.395936][ T3667] veth0_vlan: left promiscuous mode
[ 2296.956488][ T4348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2297.226127][ T4348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2299.948056][ T4351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2300.156404][ T4351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2320.839100][ T4348] hsr_slave_0: entered promiscuous mode
[ 2320.928417][ T4348] hsr_slave_1: entered promiscuous mode
[ 2324.139130][ T4351] hsr_slave_0: entered promiscuous mode
[ 2324.227625][ T4351] hsr_slave_1: entered promiscuous mode
[ 2324.268336][ T4351] debugfs: 'hsr0' already exists in 'hsr'
[ 2324.274384][ T4351] Cannot create hsr debugfs directory
[ 2339.507888][ T4348] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2340.277799][ T4348] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2340.762674][ T4348] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2342.355735][ T4348] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2347.112194][ T4351] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2347.608464][ T4351] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2348.201287][ T4351] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2348.622908][ T4351] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2371.319774][ T4348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2376.450300][ T4351] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2502.695716][ T4348] veth0_vlan: entered promiscuous mode
[ 2503.556815][ T4348] veth1_vlan: entered promiscuous mode
[ 2507.266518][ T4348] veth0_macvtap: entered promiscuous mode
[ 2508.541137][ T4348] veth1_macvtap: entered promiscuous mode
[ 2509.266675][ T4351] veth0_vlan: entered promiscuous mode
[ 2511.166654][ T4351] veth1_vlan: entered promiscuous mode
[ 2514.247388][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2514.248918][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2514.261815][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2514.400902][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2518.771159][ T4351] veth0_macvtap: entered promiscuous mode
[ 2519.704015][ T4351] veth1_macvtap: entered promiscuous mode
[ 2524.711662][ T4518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2524.735346][ T4216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2524.872420][ T3427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2524.879119][ T3427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3088.852159][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3091.356619][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3093.308765][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3095.191436][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3124.242594][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3124.736092][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3125.148569][   T49] bond0 (unregistering): Released all slaves
[ 3128.499615][   T49] hsr_slave_0: left promiscuous mode
[ 3128.596856][   T49] hsr_slave_1: left promiscuous mode
[ 3129.504760][   T49] veth1_macvtap: left promiscuous mode
[ 3129.537627][   T49] veth0_macvtap: left promiscuous mode
[ 3129.566512][   T49] veth1_vlan: left promiscuous mode
[ 3129.580140][   T49] veth0_vlan: left promiscuous mode
[ 3239.205249][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3239.647893][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3286.306697][ T4900] hsr_slave_0: entered promiscuous mode
[ 3286.452493][ T4900] hsr_slave_1: entered promiscuous mode
[ 3286.528477][ T4900] debugfs: 'hsr0' already exists in 'hsr'
[ 3286.552419][ T4900] Cannot create hsr debugfs directory
[ 3313.308208][ T4900] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3313.761756][ T4900] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3314.248414][ T4900] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3314.756051][ T4900] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3349.405900][ T5060] FAULT_INJECTION: forcing a failure.
[ 3349.405900][ T5060] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 3349.434013][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.4.261 Not tainted syzkaller #0 PREEMPT 
[ 3349.434708][ T5060] Hardware name: linux,dummy-virt (DT)
[ 3349.435161][ T5060] Call trace:
[ 3349.435592][ T5060]  show_stack+0x2c/0x3c (C)
[ 3349.437468][ T5060]  __dump_stack+0x30/0x40
[ 3349.437776][ T5060]  dump_stack_lvl+0xd8/0x12c
[ 3349.438004][ T5060]  dump_stack+0x1c/0x28
[ 3349.438217][ T5060]  should_fail_ex+0x570/0x6e0
[ 3349.438477][ T5060]  should_fail+0x14/0x24
[ 3349.438705][ T5060]  should_fail_usercopy+0x20/0x30
[ 3349.438947][ T5060]  simple_read_from_buffer+0xd0/0x298
[ 3349.439156][ T5060]  proc_fail_nth_read+0x184/0x218
[ 3349.439388][ T5060]  vfs_read+0x220/0x9a8
[ 3349.439676][ T5060]  ksys_read+0x100/0x1f4
[ 3349.439948][ T5060]  __arm64_sys_read+0x98/0xcc
[ 3349.440239][ T5060]  invoke_syscall+0x90/0x2b4
[ 3349.440553][ T5060]  el0_svc_common+0x180/0x2f4
[ 3349.440845][ T5060]  do_el0_svc+0x58/0x74
[ 3349.441126][ T5060]  el0_svc+0x58/0x164
[ 3349.441378][ T5060]  el0t_64_sync_handler+0x84/0x12c
[ 3349.441618][ T5060]  el0t_64_sync+0x198/0x19c
[ 3355.101802][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3542.580976][ T4900] veth0_vlan: entered promiscuous mode
[ 3543.927974][ T4900] veth1_vlan: entered promiscuous mode
[ 3548.731947][ T4900] veth0_macvtap: entered promiscuous mode
[ 3550.046765][ T4900] veth1_macvtap: entered promiscuous mode
[ 3554.411909][ T3354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3554.429702][ T3354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3554.565704][ T3354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3554.596023][ T3354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3939.008883][ T3427] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3940.646750][ T3427] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3942.662279][ T3427] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3944.431259][ T3427] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3973.620522][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3974.249746][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3974.512473][ T3427] bond0 (unregistering): Released all slaves
[ 3977.886555][ T3427] hsr_slave_0: left promiscuous mode
[ 3978.079816][ T3427] hsr_slave_1: left promiscuous mode
[ 3979.024580][ T3427] veth1_macvtap: left promiscuous mode
[ 3979.025982][ T3427] veth0_macvtap: left promiscuous mode
[ 3979.036569][ T3427] veth1_vlan: left promiscuous mode
[ 3979.067615][ T3427] veth0_vlan: left promiscuous mode
[ 4104.992301][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4105.462840][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4152.376612][ T5357] hsr_slave_0: entered promiscuous mode
[ 4152.576877][ T5357] hsr_slave_1: entered promiscuous mode
[ 4152.662032][ T5357] debugfs: 'hsr0' already exists in 'hsr'
[ 4152.696256][ T5357] Cannot create hsr debugfs directory
[ 4180.570918][ T5357] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 4181.116512][ T5357] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 4181.699279][ T5357] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 4182.218035][ T5357] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 4227.350105][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4325.361285][ T4281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4327.996411][ T4281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4330.072439][ T4281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4332.342118][ T4281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4358.000397][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4358.170435][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4358.270083][ T4281] bond0 (unregistering): Released all slaves
[ 4361.877037][ T4281] hsr_slave_0: left promiscuous mode
[ 4362.011512][ T4281] hsr_slave_1: left promiscuous mode
[ 4363.047018][ T4281] veth1_macvtap: left promiscuous mode
[ 4363.075619][ T4281] veth0_macvtap: left promiscuous mode
[ 4363.082951][ T4281] veth1_vlan: left promiscuous mode
[ 4363.116815][ T4281] veth0_vlan: left promiscuous mode
[ 4440.510975][ T5357] veth0_vlan: entered promiscuous mode
[ 4441.876122][ T5357] veth1_vlan: entered promiscuous mode
[ 4446.861708][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4447.388752][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4450.498011][ T5357] veth0_macvtap: entered promiscuous mode
[ 4451.471152][ T5357] veth1_macvtap: entered promiscuous mode
[ 4455.379499][ T3416] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4455.385233][ T3416] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4455.545664][ T3416] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4455.557962][ T3416] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4500.129588][ T5537] hsr_slave_0: entered promiscuous mode
[ 4500.292825][ T5537] hsr_slave_1: entered promiscuous mode
[ 4529.622639][ T5537] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 4530.537500][ T5537] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 4531.247577][ T5537] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 4531.909793][ T5537] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 4578.691942][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4801.101484][ T5537] veth0_vlan: entered promiscuous mode
[ 4802.792746][ T5537] veth1_vlan: entered promiscuous mode
[ 4808.320541][ T5537] veth0_macvtap: entered promiscuous mode
[ 4809.446858][ T5537] veth1_macvtap: entered promiscuous mode
[ 4814.675468][ T5378] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4814.682858][ T5378] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4814.747116][ T4861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4814.767398][ T4861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4940.052513][ T3354] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4942.621317][ T3354] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4945.101222][ T3354] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4947.431405][ T3354] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4974.812642][ T3354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4975.249007][ T3354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4975.448461][ T3354] bond0 (unregistering): Released all slaves
[ 4980.705258][ T3354] hsr_slave_0: left promiscuous mode
[ 4981.035705][ T3354] hsr_slave_1: left promiscuous mode
[ 4982.061678][ T3354] veth1_macvtap: left promiscuous mode
[ 4982.077577][ T3354] veth0_macvtap: left promiscuous mode
[ 4982.109185][ T3354] veth1_vlan: left promiscuous mode
[ 4982.125476][ T3354] veth0_vlan: left promiscuous mode
[ 5031.269093][ T3354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5033.339878][ T3354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5035.219702][ T3354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5037.266124][ T3354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5066.675631][ T3354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5066.950671][ T3354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5067.136300][ T3354] bond0 (unregistering): Released all slaves
[ 5070.186649][ T3354] hsr_slave_0: left promiscuous mode
[ 5070.297760][ T3354] hsr_slave_1: left promiscuous mode
[ 5070.821365][ T3354] veth1_macvtap: left promiscuous mode
[ 5070.900115][ T3354] veth0_macvtap: left promiscuous mode
[ 5070.908886][ T3354] veth1_vlan: left promiscuous mode
[ 5070.910510][ T3354] veth0_vlan: left promiscuous mode
[ 5127.219609][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5127.701525][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5132.908298][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5133.268897][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5166.829558][ T5816] hsr_slave_0: entered promiscuous mode
[ 5166.948768][ T5816] hsr_slave_1: entered promiscuous mode
[ 5173.022488][ T5820] hsr_slave_0: entered promiscuous mode
[ 5173.159070][ T5820] hsr_slave_1: entered promiscuous mode
[ 5173.265377][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[ 5173.285060][ T5820] Cannot create hsr debugfs directory
[ 5199.297453][ T5816] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5199.993010][ T5816] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5202.615435][ T5816] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5203.279642][ T5816] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5217.507696][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 5218.175078][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 5218.582647][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 5219.466895][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 5248.758796][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5262.573152][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5421.789473][ T5820] veth0_vlan: entered promiscuous mode
[ 5423.389506][ T5820] veth1_vlan: entered promiscuous mode
[ 5428.119069][ T5820] veth0_macvtap: entered promiscuous mode
[ 5429.157248][ T5820] veth1_macvtap: entered promiscuous mode
[ 5434.112865][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5434.166150][ T4518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5434.184945][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5434.187670][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5443.827926][ T5816] veth0_vlan: entered promiscuous mode
[ 5445.346759][ T5816] veth1_vlan: entered promiscuous mode
[ 5450.957815][ T5816] veth0_macvtap: entered promiscuous mode
[ 5452.277287][ T5816] veth1_macvtap: entered promiscuous mode
[ 5457.885337][ T5378] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5457.915361][ T5967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5458.004765][ T4518] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5458.015436][ T4518] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5509.068917][ T4281] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5513.242460][ T4281] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5516.629184][ T4281] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5519.897024][ T4281] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5560.802439][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5561.627119][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5562.060105][ T4281] bond0 (unregistering): Released all slaves
[ 5566.576345][ T4281] hsr_slave_0: left promiscuous mode
[ 5566.751047][ T4281] hsr_slave_1: left promiscuous mode
[ 5567.962156][ T4281] veth1_macvtap: left promiscuous mode
[ 5568.037426][ T4281] veth0_macvtap: left promiscuous mode
[ 5568.076910][ T4281] veth1_vlan: left promiscuous mode
[ 5568.105102][ T4281] veth0_vlan: left promiscuous mode
[ 5724.165557][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5724.775857][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5747.436636][ T5045] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5749.977675][ T5045] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5752.549701][ T5045] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5757.846427][ T5045] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5791.066249][ T5045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5791.557567][ T5045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5791.917235][ T5045] bond0 (unregistering): Released all slaves
[ 5795.439807][ T5045] hsr_slave_0: left promiscuous mode
[ 5795.661392][ T5045] hsr_slave_1: left promiscuous mode
[ 5796.549951][ T5045] veth1_macvtap: left promiscuous mode
[ 5796.560239][ T5045] veth0_macvtap: left promiscuous mode
[ 5796.598886][ T5045] veth1_vlan: left promiscuous mode
[ 5796.666233][ T5045] veth0_vlan: left promiscuous mode
[ 5830.409099][ T6077] hsr_slave_0: entered promiscuous mode
[ 5830.552761][ T6077] hsr_slave_1: entered promiscuous mode
[ 5873.616118][ T6077] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5876.315337][ T6077] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5878.168397][ T6077] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5878.799774][ T6077] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5901.239098][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5901.729821][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5919.199948][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5951.769594][ T6154] hsr_slave_0: entered promiscuous mode
[ 5951.922722][ T6154] hsr_slave_1: entered promiscuous mode
[ 5952.010223][ T6154] debugfs: 'hsr0' already exists in 'hsr'
[ 5952.042117][ T6154] Cannot create hsr debugfs directory
[ 5996.998628][ T6154] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 5997.866790][ T6154] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 5998.788993][ T6154] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 5999.446269][ T6154] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 6040.851941][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6158.971631][ T5378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6159.711953][ T5378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6160.288688][ T5378] bond0 (unregistering): Released all slaves
[ 6163.534848][ T5378] hsr_slave_0: left promiscuous mode
[ 6163.691811][ T5378] hsr_slave_1: left promiscuous mode
[ 6233.241094][ T6154] veth0_vlan: entered promiscuous mode
[ 6234.277477][ T6154] veth1_vlan: entered promiscuous mode
[ 6237.858319][ T6154] veth0_macvtap: entered promiscuous mode
[ 6240.299753][ T6154] veth1_macvtap: entered promiscuous mode
[ 6246.615326][ T5549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6246.638250][ T5549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6246.765599][ T5549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6246.778497][ T5549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6269.976368][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6270.521803][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6327.171906][ T6335] hsr_slave_0: entered promiscuous mode
[ 6327.370783][ T6335] hsr_slave_1: entered promiscuous mode
[ 6368.513080][ T6335] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6369.405231][ T6335] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6370.080804][ T6335] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6370.769628][ T6335] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6421.037659][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6643.130204][ T6335] veth0_vlan: entered promiscuous mode
[ 6644.506488][ T6335] veth1_vlan: entered promiscuous mode
[ 6649.909459][ T6335] veth0_macvtap: entered promiscuous mode
[ 6650.867948][ T6335] veth1_macvtap: entered promiscuous mode
[ 6656.411628][ T5045] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6656.422657][ T5045] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6656.491067][ T5045] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6656.528345][ T6292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 7110.645886][ T4518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7113.098428][ T4518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7115.442359][ T4518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7118.747611][ T4518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7152.343087][ T4518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 7152.917081][ T4518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 7153.393142][ T4518] bond0 (unregistering): Released all slaves
[ 7157.488997][ T4518] hsr_slave_0: left promiscuous mode
[ 7157.617875][ T4518] hsr_slave_1: left promiscuous mode
[ 7158.481120][ T4518] veth1_macvtap: left promiscuous mode
[ 7158.577726][ T4518] veth0_macvtap: left promiscuous mode
[ 7158.581612][ T4518] veth1_vlan: left promiscuous mode
[ 7158.588542][ T4518] veth0_vlan: left promiscuous mode
[ 7201.007764][ T4518] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7203.119385][ T4518] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7204.759864][ T4518] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7206.428360][ T4518] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7240.576879][ T4518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 7240.789526][ T4518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 7241.028300][ T4518] bond0 (unregistering): Released all slaves
[ 7243.775531][ T4518] hsr_slave_0: left promiscuous mode
[ 7243.907269][ T4518] hsr_slave_1: left promiscuous mode
[ 7244.878767][ T4518] veth1_macvtap: left promiscuous mode
[ 7244.945415][ T4518] veth0_macvtap: left promiscuous mode
[ 7244.957574][ T4518] veth1_vlan: left promiscuous mode
[ 7244.959222][ T4518] veth0_vlan: left promiscuous mode
[ 7280.516763][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7281.118000][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7312.650802][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7313.155982][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7326.471188][ T6765] hsr_slave_0: entered promiscuous mode
[ 7326.665889][ T6765] hsr_slave_1: entered promiscuous mode
[ 7362.949757][ T6776] hsr_slave_0: entered promiscuous mode
[ 7363.100774][ T6776] hsr_slave_1: entered promiscuous mode
[ 7363.158526][ T6776] debugfs: 'hsr0' already exists in 'hsr'
[ 7363.214628][ T6776] Cannot create hsr debugfs directory
[ 7372.714634][ T6765] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 7374.167451][ T6765] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 7375.359287][ T6765] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 7375.898647][ T6765] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 7404.056530][ T6776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 7404.742724][ T6776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 7405.754727][ T6776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 7406.495192][ T6776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 7420.976697][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7446.962330][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7572.070077][ T6765] veth0_vlan: entered promiscuous mode
[ 7573.488861][ T6765] veth1_vlan: entered promiscuous mode
[ 7577.131408][ T6765] veth0_macvtap: entered promiscuous mode
[ 7578.037367][ T6765] veth1_macvtap: entered promiscuous mode
[ 7582.257788][ T5045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7582.261838][ T5045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7582.373018][ T6292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7582.451744][ T6292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 7603.976900][ T6776] veth0_vlan: entered promiscuous mode
[ 7605.601223][ T6776] veth1_vlan: entered promiscuous mode
[ 7610.737240][ T6776] veth0_macvtap: entered promiscuous mode
[ 7611.628948][ T6776] veth1_macvtap: entered promiscuous mode
[ 7616.800280][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7616.848258][ T4518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7616.886886][ T4518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7616.927834][ T3667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8119.428462][ T3667] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8121.551939][ T3667] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8123.619097][ T3667] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8125.637840][ T3667] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8154.748699][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8155.069598][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8155.192517][ T3667] bond0 (unregistering): Released all slaves
[ 8157.990390][ T3667] hsr_slave_0: left promiscuous mode
[ 8158.147819][ T3667] hsr_slave_1: left promiscuous mode
[ 8159.194916][ T3667] veth1_macvtap: left promiscuous mode
[ 8159.196243][ T3667] veth0_macvtap: left promiscuous mode
[ 8159.280003][ T3667] veth1_vlan: left promiscuous mode
[ 8159.308871][ T3667] veth0_vlan: left promiscuous mode
[ 8192.680343][ T3667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8195.003183][ T3667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8196.977786][ T3667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8198.838556][ T3667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8228.432741][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8228.561479][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8228.690571][ T3667] bond0 (unregistering): Released all slaves
[ 8230.697108][ T3667] hsr_slave_0: left promiscuous mode
[ 8230.755907][ T3667] hsr_slave_1: left promiscuous mode
[ 8231.265647][ T3667] veth1_macvtap: left promiscuous mode
[ 8231.269542][ T3667] veth0_macvtap: left promiscuous mode
[ 8231.285633][ T3667] veth1_vlan: left promiscuous mode
[ 8231.289918][ T3667] veth0_vlan: left promiscuous mode
[ 8301.262624][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8302.387491][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8302.584984][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8303.518722][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8345.379578][ T7235] hsr_slave_0: entered promiscuous mode
[ 8345.459154][ T7235] hsr_slave_1: entered promiscuous mode
[ 8348.321837][ T7239] hsr_slave_0: entered promiscuous mode
[ 8348.382293][ T7239] hsr_slave_1: entered promiscuous mode
[ 8348.425133][ T7239] debugfs: 'hsr0' already exists in 'hsr'
[ 8348.428743][ T7239] Cannot create hsr debugfs directory
[ 8387.709160][ T7235] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 8388.637960][ T7235] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 8389.427092][ T7235] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 8391.088028][ T7235] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 8397.150715][ T7239] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 8397.611002][ T7239] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 8398.042492][ T7239] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 8398.470857][ T7239] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 8426.779383][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8432.682653][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8582.492181][ T7235] veth0_vlan: entered promiscuous mode
[ 8583.694095][ T7235] veth1_vlan: entered promiscuous mode
[ 8588.261366][ T7235] veth0_macvtap: entered promiscuous mode
[ 8589.506836][ T7239] veth0_vlan: entered promiscuous mode
[ 8589.676009][ T7235] veth1_macvtap: entered promiscuous mode
[ 8591.606787][ T7239] veth1_vlan: entered promiscuous mode
[ 8594.605244][ T6792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8594.628201][ T6792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8594.629357][ T6792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8594.630159][ T6792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8597.744044][ T7239] veth0_macvtap: entered promiscuous mode
[ 8598.690916][ T7239] veth1_macvtap: entered promiscuous mode
[ 8603.625952][ T5549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8603.631027][ T5549] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8603.698342][ T5549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8603.742103][ T3667] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 9230.028123][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9230.640255][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9250.277434][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9250.821644][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9287.882679][ T7729] hsr_slave_0: entered promiscuous mode
[ 9288.050304][ T7729] hsr_slave_1: entered promiscuous mode
[ 9288.322537][ T7729] debugfs: 'hsr0' already exists in 'hsr'
[ 9288.354473][ T7729] Cannot create hsr debugfs directory
[ 9312.049725][ T7735] hsr_slave_0: entered promiscuous mode
[ 9312.211249][ T7735] hsr_slave_1: entered promiscuous mode
[ 9312.358830][ T7735] debugfs: 'hsr0' already exists in 'hsr'
[ 9312.389710][ T7735] Cannot create hsr debugfs directory
[ 9350.620266][ T7729] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 9354.086770][ T7729] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 9354.999953][ T7729] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 9358.772310][ T7729] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 9378.977007][ T7735] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 9379.629454][ T7735] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 9380.287264][ T7735] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 9381.008592][ T7735] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 9413.958154][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9430.059499][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9487.338818][   T27] INFO: task syz.6.495:7711 blocked for more than 430 seconds.
[ 9487.345444][   T27]       Not tainted syzkaller #0
[ 9487.346376][   T27]       Blocked by coredump.
[ 9487.346708][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 9487.347182][   T27] task:syz.6.495       state:D stack:0     pid:7711  tgid:7711  ppid:7239   task_flags:0x40004c flags:0x00000010
[ 9487.348367][   T27] Call trace:
[ 9487.348759][   T27]  __switch_to+0x584/0xb20 (T)
[ 9487.349362][   T27]  __schedule+0x1eec/0x33a4
[ 9487.349899][   T27]  schedule+0xac/0x27c
[ 9487.350420][   T27]  schedule_timeout+0x5c/0x1e4
[ 9487.350854][   T27]  do_wait_for_common+0x28c/0x444
[ 9487.351261][   T27]  wait_for_completion+0x44/0x5c
[ 9487.351770][   T27]  __synchronize_srcu+0x2a4/0x320
[ 9487.352274][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 9487.352744][   T27]  __mmu_notifier_release+0x424/0x614
[ 9487.567262][   T27]  exit_mmap+0xb8/0xbb8
[ 9487.576563][   T27]  __mmput+0x10c/0x528
[ 9487.577304][   T27]  mmput+0x70/0xac
[ 9487.577877][   T27]  exit_mm+0x158/0x258
[ 9487.578366][   T27]  do_exit+0x788/0x2378
[ 9487.578832][   T27]  do_group_exit+0x288/0x2ac
[ 9487.579288][   T27]  __arm64_sys_exit_group+0x40/0x48
[ 9487.579763][   T27]  invoke_syscall+0x90/0x2b4
[ 9487.580292][   T27]  el0_svc_common+0x180/0x2f4
[ 9487.580806][   T27]  do_el0_svc+0x58/0x74
[ 9487.581323][   T27]  el0_svc+0x58/0x164
[ 9487.581808][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 9487.582279][   T27]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 9487.726877][   T27] 
[ 9487.726877][   T27] Showing all locks held in the system:
[ 9487.751108][   T27] 1 lock held by khungtaskd/27:
[ 9487.751711][   T27]  #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 9487.785793][   T27] 2 locks held by getty/3184:
[ 9487.786246][   T27]  #0: edf0000011d0a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 9487.788006][   T27]  #1: 90ff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 9487.789797][   T27] 1 lock held by sshd-session/3309:
[ 9487.790176][   T27] 2 locks held by syz-executor/3310:
[ 9487.790517][   T27] 3 locks held by kworker/u4:1/3667:
[ 9487.790836][   T27] 3 locks held by kworker/u4:12/5045:
[ 9487.791173][   T27] 3 locks held by kworker/u4:9/5549:
[ 9487.791535][   T27] 3 locks held by kworker/u4:15/5969:
[ 9487.791866][   T27] 3 locks held by kworker/u4:6/6792:
[ 9487.792229][   T27] 2 locks held by kworker/u4:3/7238:
[ 9487.792563][   T27]  #0: 94f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 9487.951827][   T27]  #1: ffff80008ceb7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 9488.034919][   T27] 3 locks held by kworker/u4:7/7257:
[ 9488.035459][   T27] 2 locks held by syz.5.494/7707:
[ 9488.035812][   T27] 2 locks held by kworker/u4:2/7726:
[ 9488.036122][   T27]  #0: 94f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 9488.038038][   T27]  #1: ffff80008fdb7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 9488.039814][   T27] 2 locks held by kworker/u4:5/7739:
[ 9488.040138][   T27]  #0: 94f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 9488.041831][   T27]  #1: ffff80008fdf7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 9488.175287][   T27] 4 locks held by modprobe/7897:
[ 9488.219583][   T27] 
[ 9488.220051][   T27] =============================================
[ 9488.220051][   T27] 
[ 9508.475584][   T27] INFO: task syz.6.495:7711 blocked for more than 451 seconds.
[ 9508.488447][   T27]       Not tainted syzkaller #0
[ 9508.507220][   T27]       Blocked by coredump.
[ 9508.510978][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 9508.511424][   T27] task:syz.6.495       state:D stack:0     pid:7711  tgid:7711  ppid:7239   task_flags:0x40004c flags:0x00000010
[ 9508.512148][   T27] Call trace:
[ 9508.512445][   T27]  __switch_to+0x584/0xb20 (T)
[ 9508.512994][   T27]  __schedule+0x1eec/0x33a4
[ 9508.610199][   T27]  schedule+0xac/0x27c
[ 9508.616511][   T27]  schedule_timeout+0x5c/0x1e4
[ 9508.617134][   T27]  do_wait_for_common+0x28c/0x444
[ 9508.617594][   T27]  wait_for_completion+0x44/0x5c
[ 9508.618155][   T27]  __synchronize_srcu+0x2a4/0x320
[ 9508.618651][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 9508.619117][   T27]  __mmu_notifier_release+0x424/0x614
[ 9508.619597][   T27]  exit_mmap+0xb8/0xbb8
[ 9508.620088][   T27]  __mmput+0x10c/0x528
[ 9508.620597][   T27]  mmput+0x70/0xac
[ 9508.621077][   T27]  exit_mm+0x158/0x258
[ 9508.621541][   T27]  do_exit+0x788/0x2378
[ 9508.622019][   T27]  do_group_exit+0x288/0x2ac
[ 9508.622484][   T27]  __arm64_sys_exit_group+0x40/0x48
[ 9508.622951][   T27]  invoke_syscall+0x90/0x2b4
[ 9508.766543][   T27]  el0_svc_common+0x180/0x2f4
[ 9508.767265][   T27]  do_el0_svc+0x58/0x74
[ 9508.767777][   T27]  el0_svc+0x58/0x164
[ 9508.768249][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 9508.768697][   T27]  el0t_64_sync+0x198/0x19c
[ 9508.809101][   T27] 
[ 9508.809101][   T27] Showing all locks held in the system:
[ 9508.817495][   T27] 1 lock held by khungtaskd/27:
[ 9508.818128][   T27]  #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 9508.820084][   T27] 2 locks held by getty/3184:
[ 9508.820432][   T27]  #0: edf0000011d0a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 9508.822111][   T27]  #1: 90ff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 9508.916181][   T27] 3 locks held by kworker/u4:1/3667:
[ 9508.916544][   T27] 3 locks held by kworker/u4:10/4281:
[ 9508.916913][   T27] 3 locks held by kworker/u4:15/5969:
[ 9508.917300][   T27] 2 locks held by kworker/u4:7/7257:
[ 9508.917621][   T27]  #0: 94f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 9508.919423][   T27]  #1: ffff80008e767c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 9508.921175][   T27] 2 locks held by syz.5.494/7707:
[ 9508.921553][   T27] 3 locks held by kworker/u4:13/7879:
[ 9508.921918][   T27] 2 locks held by modprobe/7905:
[ 9508.922330][   T27] 
[ 9508.922561][   T27] =============================================
[ 9508.922561][   T27] 

VM DIAGNOSIS:
15:44:36  Registers:
info registers vcpu 0

CPU#0
 PC=ffff800080ca2ce8 X00=ffff800080550a50 X01=ffff800080008000
X02=9cf000000d9b9d80 X03=0000000000000000 X04=0000000000000001
X05=0000000000000000 X06=0000000000000000 X07=ffff80008534d3c0
X08=9cf000000d9b9d80 X09=0000000000000000 X10=0000000000ff0100
X11=00000000000000ff X12=00000000000000ff X13=0000000000000050
X14=0ffff80008000768 X15=0000000000000050 X16=0000000000000000
X17=fff07fffeb67d000 X18=00000000000000ff X19=ffff80008c4f7af0
X20=ffff8000800075b8 X21=9cf000000d9b9d80 X22=ffff800080007568
X23=ffff80008c4f7b1f X24=ffff80008c4f7b70 X25=ffff8000800075b8
X26=ffff800087725000 X27=00000000000000ff X28=0000000000000000
X29=ffff800080007520 X30=ffff8000800e2fd8  SP=ffff800080007560
PSTATE=00402009 ---- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=2525252525252525:2525252525252525 Z01=6572207265767265:730073250a0d0a0d
Z02=742065726f6d2072:6f662064656b636f Z03=0000000000000000:00ff00ff00000000
Z04=0000000000000000:000000000f0f0000 Z05=726f6d20726f6620:64656b636f6c6220
Z06=203a29315f657661:6c735f646e6f6220 Z07=206e612073612067:6e6976616c736e45
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000ffffdf6aadc0:0000ffffdf6aadc0 Z17=ffffff80ffffffd8:0000ffffdf6aad90
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000