last executing test programs:

45m53.359315143s ago: executing program 0 (id=488):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd2(0x8, 0x0)
r5 = eventfd2(0x5, 0x1)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x25000, 0x0, r5, 0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r4, 0x3})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r4, 0x3})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000001c0)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0xfdb})
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x3, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2)

45m47.925263979s ago: executing program 1 (id=489):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x84, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000100)={0x5, 0x101})
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000c35000/0x1000)=nil, r5, 0x1000002, 0x12, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000000), 0x72483, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

45m38.816805549s ago: executing program 1 (id=490):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000465000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, 0x0, 0x300000a, 0x40010, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r7, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r9, 0x2000009, 0x213011, r7, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x603000000010000c, &(0x7f0000000100)=0xc5c5})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

45m35.072720488s ago: executing program 0 (id=491):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x103802, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8000000000000000)
ioctl$KVM_CHECK_EXTENSION(r0, 0xc0189436, 0x172)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8)
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x78}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xc00, 0xffff, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x2, 0x1}}, @eret={0xe6, 0x18, 0xc}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0xfffffffffffffffd}, @irq_setup={0x46, 0x18, {0x81, 0x1af}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xd00, 0x1, 0x2}}, @smc={0x1e, 0x40, {0x4, [0x5, 0x3, 0x2, 0x5, 0x20]}}], 0x170}], 0x1, 0x0, &(0x7f0000000200)=[@featur1={0x1, 0xc0}], 0x1)

45m29.670207159s ago: executing program 0 (id=492):
mmap$KVM_VCPU(&(0x7f0000dc3000/0x2000)=nil, 0x930, 0x0, 0x28131, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x8000000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x2, 0x8080000, 0x4, r7, 0x1})
r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x4, <r12=>0xffffffffffffffff})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, <r15=>0xffffffffffffffff, 0x1})
write$eventfd(r15, &(0x7f00000001c0)=0xffffff7f, 0xff25)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x3})

45m26.203841556s ago: executing program 1 (id=493):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x87fe, 0x800)
r4 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4}) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r4})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x78, 0x3, 0x1, 0x0, @adapter={0x800, 0x3, 0x0, 0xab, 0xa28}}]})
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x5, 0x2, r3})

45m14.32630218s ago: executing program 1 (id=494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x4})
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x0, 0x8}}, @smc={0x1e, 0x40, {0xc4000007, [0x1ff, 0x5, 0x3, 0x7f, 0x4000000000003]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x40, 0x4eb778b9, 0x1}}, @code={0xa, 0x6c, {"007008d50028c09ac01590d20020b0f2410180d2620180d2c30080d2a40180d2020000d4007008d50030200e40669dd20000b0f2410080d2020080d2a30080d2440180d2020000d40028c01a007008d5008008d5bf2003d5"}}, @svc={0x122, 0x40, {0x84000005, [0x3bb7cad3, 0x2, 0x1, 0x7, 0x5]}}, @irq_setup={0x46, 0x18, {0x3, 0x200}}, @uexit={0x0, 0x18, 0x38a58561}], 0x17c}, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x35, 0xb000, 0x4, 0xffffffffffffffff, 0x5})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f)
r7 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r10 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r9, 0x300000a, 0x10010, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, 0xffffffffffffffff)
r12 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x4, 0x0, &(0x7f0000000200)=0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x1ff, 0x4})

45m13.740700387s ago: executing program 0 (id=495):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

45m7.434886247s ago: executing program 0 (id=496):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=[@featur1={0x1, 0x633563f6b2813d7}], 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x6)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c79000/0x4000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

45m3.269928697s ago: executing program 1 (id=497):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async, rerun: 64)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="8f8f029ccfa638523914f9cbcb1353e5bf12af0aca0bc42de91e9479299a791e4f1dc03130da6a0156db7369d7f40625c17264db4de0cdbcda39b1e60d37c670bfc0e3d53db467c4", 0x0, 0x48) (rerun: 64)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

44m59.665914262s ago: executing program 0 (id=498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x4, 0xf000, 0x2000, &(0x7f00002de000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, 0xffffffffffffffff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161442, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f00003b6000/0x3000)=nil, r8, 0x0, 0x2010, r10, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0x5460, 0xfffffffffffffffe)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r13, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000140)={0xc, 0x60000})
r14 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
syz_memcpy_off$KVM_EXIT_MMIO(r14, 0x20, &(0x7f0000000180)="fb3e6ad6b98c1ce940119f55a326cff6256229a8e60ace9d", 0x0, 0x18)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

44m55.675555297s ago: executing program 1 (id=499):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x1000000, 0x810, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xb1)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bc5000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r13 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x14, 0x1}})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xc0189436, 0x20003fff)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, 0x0)
ioctl$KVM_GET_SREGS(r4, 0x8000ae83, 0x0)

44m13.261618746s ago: executing program 32 (id=498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x4, 0xf000, 0x2000, &(0x7f00002de000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, 0xffffffffffffffff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161442, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f00003b6000/0x3000)=nil, r8, 0x0, 0x2010, r10, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0x5460, 0xfffffffffffffffe)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r13, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000140)={0xc, 0x60000})
r14 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
syz_memcpy_off$KVM_EXIT_MMIO(r14, 0x20, &(0x7f0000000180)="fb3e6ad6b98c1ce940119f55a326cff6256229a8e60ace9d", 0x0, 0x18)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

44m7.885239565s ago: executing program 33 (id=499):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x1000000, 0x810, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xb1)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bc5000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r13 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x14, 0x1}})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xc0189436, 0x20003fff)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, 0x0)
ioctl$KVM_GET_SREGS(r4, 0x8000ae83, 0x0)

34m38.960573095s ago: executing program 2 (id=534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x8, 0x80800)
r3 = eventfd2(0x8, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0xe000, 0x0, r3, 0x2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x8000000000000002, 0x0, 0x2, r2, 0x2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r2, 0x3})

34m25.983280333s ago: executing program 2 (id=536):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0xcd7, 0x41000})

34m13.703622241s ago: executing program 2 (id=537):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013dce0}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000)
write$eventfd(r6, &(0x7f0000000000), 0xfffffdef)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
munmap(&(0x7f0000008000/0x1000)=nil, 0x200000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, r7, 0x100000f, 0x80010, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000540)=[{0x0, 0x0, 0x51c}], 0x1, 0x0, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000040)={0x7, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0})
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async)
r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r13, 0x4020aea5, 0xffffffffffffffff)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0x80111500, 0xfffffffffffff000)
r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION2(r15, 0x40a0ae49, &(0x7f0000000240)={0x4, 0x0, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x1000, r11})

33m50.553687754s ago: executing program 2 (id=540):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x2, 0x10000000000000)
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r7 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x5, 0xe0, &(0x7f0000000040)=0xfffffffffffffff8})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x304, &(0x7f00000000c0)=0x82})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x0, 0xb0)
r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8000000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

33m35.54807673s ago: executing program 2 (id=541):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@irq_setup={0x46, 0x18, {0x0, 0x27e}}, @smc={0x1e, 0x40, {0x5000000, [0x9, 0x100, 0x9, 0xfff, 0x100000000]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x2dd}}, @code={0xa, 0xfc, {"204e97d20020b0f2e10080d2820080d2630180d2440080d2020000d4e0a98fd20020b8f2c10080d2e20080d2630180d2c40180d2020000d420b489d200e0b8f2610080d2020080d2630080d2c40180d2020000d4c00586d20040b0f2810080d2220180d2e30080d2c40080d2020000d440848ad200a0b8f2c10180d2420180d2030080d2440080d2020000d4bf3003d5000028d5c0c19ed200e0b0f2a10080d2c20080d2c30080d2040180d2020000d420f389d20040b8f2410080d2a20180d2a30180d2440180d2020000d4c02780d20080b0f2c10080d2e20080d2e30080d2040180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffb8, 0x3, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x14, 0xfffffffffffffff9, 0xa}}, @eret={0xe6, 0x18, 0xf7c3}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x2, 0x57}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x3b4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1600, 0x4}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x35f}}, @msr={0x14, 0x20, {0x301800000009efb9, 0xffffffffffffffff}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x1c4}}, @uexit={0x0, 0x18, 0xffffffffffff6c3f}, @smc={0x1e, 0x40, {0xc4000003, [0x2, 0x7fff, 0x6, 0x100, 0x8a]}}, @eret={0xe6, 0x18, 0x8}, @svc={0x122, 0x40, {0x84000005, [0x0, 0x3, 0x6, 0x7]}}, @msr={0x14, 0x20, {0x603000000013c113}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x13b}}, @msr={0x14, 0x20, {0x60300000001384c9, 0x6}}, @msr={0x14, 0x20, {0x603000000013e281, 0x6d}}, @uexit={0x0, 0x18, 0x400}, @memwrite={0x6e, 0x30, @generic={0x30000, 0xd9f, 0x4a90, 0x7}}, @eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013df68}}, @hvc={0x32, 0x40, {0x86000001, [0x8000000000000000, 0xd8, 0x8, 0x9, 0x1]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x156}}], 0x514}, &(0x7f0000000080)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000180)=@arm64_extra={0x603000000013c026, &(0x7f00000000c0)})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad649238f48667f3efe57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c95ce42f2fe5384921830f6e273d2eb3000", 0x0, 0x48) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

33m23.314218311s ago: executing program 2 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x3c0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x0, 0x0, 0x80, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) (async)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x2})
eventfd2(0x5, 0x800)

32m35.43395407s ago: executing program 34 (id=543):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
syz_kvm_vgic_v3_setup(r3, 0x0, 0x3c0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x0, 0x0, 0x80, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0) (async)
ioctl$KVM_CAP_HALT_POLL(r12, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x2})
eventfd2(0x5, 0x800)

27m11.758653746s ago: executing program 3 (id=568):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xc0189436, 0x100000000000000)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r5 = eventfd2(0xd, 0x1)
close(r5)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r5, 0x0, 0x500)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r10, 0x4004aec2, &(0x7f0000000100)=0x4)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x4, 0x20010, r10, 0x0)

26m56.660193224s ago: executing program 3 (id=569):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x41000, 0x0, r3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x169880, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r4, 0x4})
ioctl$KVM_CHECK_EXTENSION(r5, 0x5450, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
r11 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r11, 0x9, 0x1, r3})
write$eventfd(r10, &(0x7f00000001c0)=0x8100000001, 0x2d73)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0xf000, 0x113000, 0x1})
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r13, 0xc008ae67, &(0x7f0000000040)={0x10101, 0x10001})
r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

26m31.644905061s ago: executing program 3 (id=570):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x4, 0x1e7}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x60) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10}) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x8003, 0x280) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x5000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000040)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x541b, 0x0) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r11, 0x4010ae68, 0x0)

26m11.119904629s ago: executing program 3 (id=571):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xa00000001, 0x320)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, 0x0)
r6 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f00000000c0)={0x836, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x801}}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfd000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000380)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xfffffffffffffe00})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
r12 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r13, 0x4018aee3, &(0x7f0000000200)=@attr_other={0x0, 0x7, 0x4, &(0x7f00000000c0)=0x5})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4})

25m46.616928309s ago: executing program 3 (id=572):
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x40010, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000000)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000100)=0xfffffffffffffffe})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000080)=@arm64_sve={0x6080000000150060, 0x0})
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}})
r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r11, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r13, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r14, 0x3000003, 0x2011, r13, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)

25m19.370523615s ago: executing program 3 (id=573):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0xe}}], 0x2}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) (async)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x80000002, [0x6, 0x8, 0x8, 0xc, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x3, 0xef}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e66d}}, @smc={0x1e, 0x40, {0x1000000, [0xa55, 0x7ff, 0x7, 0x97, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x1504, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x2}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x2ca}}, @svc={0x122, 0x40, {0x84000000, [0x3ff, 0x5, 0x9, 0x9, 0x8]}}, @hvc={0x32, 0x40, {0xb5000014, [0x7f, 0x8, 0x1, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e669, 0xd39e}}, @svc={0x122, 0x40, {0xc4000053, [0x8000000000000001, 0x1000, 0x100000001, 0x0, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x8, 0x6}}, @irq_setup={0x46, 0x18, {0x3, 0x41}}, @smc={0x1e, 0x40, {0x84000013, [0x3b, 0xdabe, 0x1ff, 0x7, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0xb4, {"a0768fd200a0b0f2c10080d2420080d2c30180d2c40180d2020000d4003c205e000040a9a03c9cd20080b8f2610080d2c20080d2230080d2a40180d2020000d4800181d200e0b0f2a10180d2c20180d2230080d2640180d2020000d400000091c0f093d20020b8f2410180d2220080d2430180d2440180d2020000d4007008d5e0618ed20000b0f2610180d2420080d2e30080d2e40180d2020000d4000840fa"}}, @svc={0x122, 0x40, {0xc4000014, [0x1, 0x9, 0x3d4, 0x7, 0xe]}}, @svc={0x122, 0x40, {0x1000, [0x9, 0x7fff, 0xfffffffffffffffd, 0x243, 0x2]}}], 0x3ec}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) (rerun: 32)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c01a, &(0x7f0000000180)=0x5})
syz_kvm_vgic_v3_setup(r9, 0x3, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000000)=0x4}) (async)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f00000001c0)={0xe4, 0x0, 0x964}) (async)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, <r15=>0xffffffffffffffff})
close(r15)

24m32.413631147s ago: executing program 35 (id=573):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0xe}}], 0x2}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) (async)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000040)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x80000002, [0x6, 0x8, 0x8, 0xc, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x3, 0xef}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013e66d}}, @smc={0x1e, 0x40, {0x1000000, [0xa55, 0x7ff, 0x7, 0x97, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0xa, 0x1504, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x2}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x2ca}}, @svc={0x122, 0x40, {0x84000000, [0x3ff, 0x5, 0x9, 0x9, 0x8]}}, @hvc={0x32, 0x40, {0xb5000014, [0x7f, 0x8, 0x1, 0x1]}}, @msr={0x14, 0x20, {0x603000000013e669, 0xd39e}}, @svc={0x122, 0x40, {0xc4000053, [0x8000000000000001, 0x1000, 0x100000001, 0x0, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x8, 0x6}}, @irq_setup={0x46, 0x18, {0x3, 0x41}}, @smc={0x1e, 0x40, {0x84000013, [0x3b, 0xdabe, 0x1ff, 0x7, 0x8000000000000001]}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0xb4, {"a0768fd200a0b0f2c10080d2420080d2c30180d2c40180d2020000d4003c205e000040a9a03c9cd20080b8f2610080d2c20080d2230080d2a40180d2020000d4800181d200e0b0f2a10180d2c20180d2230080d2640180d2020000d400000091c0f093d20020b8f2410180d2220080d2430180d2440180d2020000d4007008d5e0618ed20000b0f2610180d2420080d2e30080d2e40180d2020000d4000840fa"}}, @svc={0x122, 0x40, {0xc4000014, [0x1, 0x9, 0x3d4, 0x7, 0xe]}}, @svc={0x122, 0x40, {0x1000, [0x9, 0x7fff, 0xfffffffffffffffd, 0x243, 0x2]}}], 0x3ec}, &(0x7f00000000c0)=[@featur1={0x1, 0x4}], 0x1) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) (rerun: 32)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c01a, &(0x7f0000000180)=0x5})
syz_kvm_vgic_v3_setup(r9, 0x3, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000000)=0x4}) (async)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f00000001c0)={0xe4, 0x0, 0x964}) (async)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, <r15=>0xffffffffffffffff})
close(r15)

17m53.175092904s ago: executing program 4 (id=598):
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x1c6e20d979e4c968, 0x7000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) (async)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)=@riscv64_csr={0x8030000000300000, &(0x7f0000000040)=0x7})
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000000c0)={0x9, 0x85, 0x8}) (async)
ioctl$KVM_ARM_VCPU_FINALIZE(r0, 0x4004aec2, &(0x7f0000000100)=0x7)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x67}})
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0xa85, 0x2}}) (async, rerun: 32)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x1}, @code={0xa, 0xb4, {"60438fd200e0b8f2810080d2c20180d2a30080d2e40080d2020000d4a0c885d20020b8f2610180d2420180d2630080d2e40080d2020000d4206e9ed200a0b0f2210180d2e20080d2e30180d2240080d2020000d4c0e89dd20040b0f2c10180d2020080d2a30180d2640080d2020000d400d4a02ee0cb86d200a0b0f2410080d2e20180d2a30180d2840080d2020000d4000cc09a0040bf0d0044200e008008d5"}}, @uexit={0x0, 0x18, 0x10}, @eret={0xe6, 0x18}, @smc={0x1e, 0x40, {0xc400000c, [0x7, 0x3, 0x6, 0x0, 0x9]}}, @code={0xa, 0x9c, {"000000b900000011805991d20020b8f2410180d2620180d2830180d2840180d2020000d480a48ed20080b0f2e10080d2c20180d2030080d2440180d2020000d4000008d5000008d500c297d20060b8f2010080d2820080d2a30080d2640180d2020000d4007008d5000008d5a01796d20060b8f2210180d2220180d2630080d2a40180d2020000d4"}}, @smc={0x1e, 0x40, {0x0, [0x3, 0xa, 0x3, 0x0, 0x100]}}, @uexit={0x0, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013da21}}, @smc={0x1e, 0x40, {0x40000000, [0x1, 0x80000001, 0x2, 0x3, 0x6]}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x6, 0x8f3c9fa, 0x10}}, @smc={0x1e, 0x40, {0x84000008, [0x5, 0x7, 0x7, 0x80, 0x40]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0x4, 0xb1bb, 0x0, 0x2}}, @msr={0x14, 0x20, {0x603000000013c10a, 0x6e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x8, 0x5}}, @eret={0xe6, 0x18, 0x4}], 0x398}, &(0x7f0000000640), 0x1) (rerun: 32)
ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead)
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000680)={0x6, [0x100000000, 0x0, 0x1, 0x7, 0x200, 0x3]})
ioctl$KVM_ARM_PREFERRED_TARGET(r1, 0x8020aeaf, &(0x7f00000006c0)) (async)
ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000700)={{0x100000, 0x41000, 0xb, 0x0, 0xb, 0x7f, 0x0, 0x81, 0x3, 0xf1, 0x2, 0x3}, {0x6000, 0x1, 0x0, 0x1, 0x31, 0x5, 0x9, 0x9, 0xa7, 0x89, 0x8, 0xdc}, {0x200000, 0x4000, 0xd, 0x4, 0x8, 0x5, 0x9, 0x2, 0x0, 0x3, 0x3, 0xff}, {0xb000, 0x4000, 0x3f5a19225399bf71, 0x80, 0x0, 0x2, 0xfd, 0x5, 0x3, 0xfe, 0x2, 0x5}, {0x80a0000, 0x50000, 0xa, 0x6, 0x2, 0x5, 0x2, 0x4, 0x0, 0x9, 0x1b, 0x7}, {0x1000, 0xe000, 0x8, 0x2f, 0x9, 0x2, 0x6, 0x1, 0x1, 0x4, 0x2, 0x2}, {0x54000, 0x9000, 0x8, 0xfc, 0xf6, 0x4, 0x6, 0xe2, 0x7, 0x5, 0x3, 0x2}, {0x26000, 0xdddd1000, 0x9, 0x0, 0xff, 0x81, 0x7, 0xb, 0x4, 0xd, 0x7, 0x7}, {0x54000, 0x6b}, {0x0, 0x6}, 0x10, 0x0, 0x1000, 0x100, 0xf, 0x2001, 0x0, [0x3, 0x9, 0x81, 0x1]}) (async)
ioctl$KVM_ARM_VCPU_INIT(r1, 0x4020aeae, &(0x7f0000000840)={0x4, 0x40}) (async)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000880)) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000008c0)=@x86={0x2, 0xf1, 0xa, 0x0, 0xc000000, 0x1, 0xf, 0x5, 0xf4, 0x8, 0x5, 0xff, 0x0, 0x8, 0xffc00000, 0x1a, 0x9, 0x5, 0x2}) (async, rerun: 64)
syz_kvm_setup_cpu$arm64(r0, r0, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000f80)=[{0x0, &(0x7f0000000900)=[@irq_setup={0x46, 0x18, {0x2, 0x369}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x380, 0x8001, 0xb}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0x10, 0xfffffeff, 0x6, 0x1}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x7fff}, @svc={0x122, 0x40, {0x84000000, [0xfffffffffffffffb, 0x6, 0x2, 0x100000000, 0x4]}}, @hvc={0x32, 0x40, {0x84000052, [0x5, 0x1, 0xdb14, 0x3, 0x9]}}, @eret={0xe6, 0x18, 0x400}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x6, 0x1, 0x1ff, 0x4202}}, @eret={0xe6, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @mrs={0xbe, 0x18, {0x603000000013df6e}}, @code={0xa, 0xb4, {"40fb9ed200c0b8f2e10180d2a20080d2a30180d2a40180d2020000d4007008d5000028d520e986d200a0b0f2c10080d2220180d2030080d2e40180d2020000d40034205ea04180d20040b8f2a10180d2020080d2230080d2440180d2020000d4c0118fd200c0b0f2810080d2e20080d2030180d2840080d2020000d4000028d5c0458ad200e0b0f2210180d2020080d2230080d2640180d2020000d4008008d5"}}, @svc={0x122, 0x40, {0x40000000, [0x200, 0x101, 0xfffffffffffffffc, 0x95e4, 0x3f1]}}, @hvc={0x32, 0x40, {0x8400000f, [0xc3, 0x10000000000000, 0xffffffffffffffff, 0x3, 0x8]}}, @eret={0xe6, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013df19}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x190}}, @mrs={0xbe, 0x18, {0x603000000013deec}}, @hvc={0x32, 0x40, {0x1, [0x1d5, 0x7, 0x8, 0x469a]}}, @mrs={0xbe, 0x18, {0x603000000013c024}}, @msr={0x14, 0x20, {0x6030000000138025, 0x5}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x2, 0x8, 0xb3, 0x2}}, @smc={0x1e, 0x40, {0x80008000, [0x8, 0x1, 0x8, 0x7, 0x5]}}, @code={0xa, 0x9c, {"000028d560919dd200c0b0f2210080d2c20080d2c30180d2640180d2020000d4008008d5606586d200a0b0f2e10180d2c20080d2630180d2240080d2020000d4e05e9dd200a0b0f2a10080d2a20080d2430180d2a40080d2020000d40048202e008080080000719e0000c079404e8cd20040b0f2210080d2220180d2c30080d2240080d2020000d4"}}, @eret={0xe6, 0x18, 0x1}, @svc={0x122, 0x40, {0x80003fff, [0x2, 0x6, 0x5, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x2, 0x7, 0x0, 0xfffffff9}}, @code={0xa, 0xcc, {"60788cd20040b0f2e10080d2820080d2e30080d2040080d2020000d40000807960d78dd20040b0f2810180d2c20180d2230180d2240080d2020000d40004002fe0c096d20040b8f2610180d2420080d2c30080d2640180d2020000d420609fd20060b0f2a10080d2820180d2630080d2240080d2020000d4c02697d200a0b8f2e10180d2e20080d2c30180d2840080d2020000d4007008d5808f82d20020b8f2e10180d2a20180d2e30180d2840180d2020000d4000c40bc"}}, @svc={0x122, 0x40, {0x2000000, [0x100, 0x0, 0x3, 0x2, 0x8001]}}, @uexit={0x0, 0x18, 0x8}], 0x66c}], 0x1, 0x0, &(0x7f0000000fc0)=[@featur1={0x1, 0x12}], 0x1) (async, rerun: 32)
r2 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000abe000/0x400000)=nil) (rerun: 32)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000001580)={0x0, &(0x7f0000001000)=[@eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013e132}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x2, 0xc, 0x7, 0x8, 0x1}}, @eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013defe, 0x7fffffff}}, @mrs={0xbe, 0x18, {0x603000000013c4ce}}, @mrs={0xbe, 0x18, {0x603000000013c02c}}, @mrs={0xbe, 0x18, {0x603000000013def2}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0x8cf, 0x18}}, @svc={0x122, 0x40, {0xc4000011, [0x8, 0x6, 0x9, 0xd, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xc75, 0x2800000000000, 0x5}}, @svc={0x122, 0x40, {0x84000011, [0x2, 0x7, 0x100000000, 0x0, 0x7]}}, @msr={0x14, 0x20, {0x603000000013803c, 0x1}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0xb4, {"000008d500168bd200a0b0f2610080d2e20080d2e30080d2640080d2020000d40008a0f8e04596d20080b0f2810080d2620180d2830180d2440180d2020000d420eb9ed20020b8f2e10180d2020080d2630180d2c40180d2020000d4205897d20080b0f2c10180d2420180d2630080d2a40080d2020000d420149ed200c0b0f2c10080d2e20080d2e30180d2640180d2020000d40000c093000028d5007008d5"}}, @code={0xa, 0xb4, {"e09f8cd20020b8f2c10080d2a20080d2630080d2040180d2020000d420f992d20060b8f2210080d2220080d2230080d2640180d2020000d440f59bd20060b8f2a10180d2820180d2230080d2040080d2020000d4803e9ed20020b8f2210080d2620180d2030080d2040080d2020000d4000028d5008008d5200d9cd200e0b8f2c10080d2a20180d2430080d2840080d2020000d400a0006f0000407a000060c8"}}, @smc={0x1e, 0x40, {0xc4000014, [0x4, 0x7, 0x2, 0x40000000000000]}}, @mrs={0xbe, 0x18, {0x603000000013e658}}, @eret={0xe6, 0x18, 0xda7}, @mrs={0xbe, 0x18, {0x603000000013c00a}}, @hvc={0x32, 0x40, {0x8400000f, [0x0, 0x0, 0x7, 0x319, 0x6]}}, @smc={0x1e, 0x40, {0x1000, [0x524b, 0xa25, 0x1, 0xfd8a, 0x751]}}, @smc={0x1e, 0x40, {0xffff, [0xa0, 0x8, 0x7fffffff, 0x5, 0xffffffff]}}, @uexit={0x0, 0x18, 0x4}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0xf, 0x2, 0x38}}, @svc={0x122, 0x40, {0xc5000021, [0x2, 0x5, 0xffff, 0x5, 0x6]}}, @svc={0x122, 0x40, {0x8400000e, [0x3, 0x3, 0x0, 0x7, 0x9]}}], 0x560}, &(0x7f00000015c0)=[@featur2={0x1, 0x9}], 0x1) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000001640)=@attr_other={0x0, 0x9, 0x7, &(0x7f0000001600)=0xe415}) (async)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000001680)={0xe4, 0x0, 0x7f3d})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) (async)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000b96000/0x4000)=nil, r5, 0x2, 0x13, r3, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001700)={0x6})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001740))
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f00000017c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000001780)={0x6, 0x1}}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001800)={0x10200, 0x2, 0x109000, 0x1000, &(0x7f0000e49000/0x1000)=nil}) (async)
ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f0000001840)) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000001900)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000018c0)={0xfffff6aa, 0x4, 0x2}})

17m40.852513499s ago: executing program 4 (id=599):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000040)=@arm64_extra={0x603000000013c036, &(0x7f0000000100)=0x78b}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109402, 0x0) (async)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

17m24.555950283s ago: executing program 4 (id=600):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x4b49, 0x2f) (async, rerun: 32)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa, 0x1}})
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xac}, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) (async, rerun: 32)
ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x9})
eventfd2(0x5, 0x800) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x3, 0x9}}) (async, rerun: 64)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64)
r10 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100050, &(0x7f00000000c0)=0x80003fe}) (async, rerun: 64)
write$eventfd(r10, &(0x7f0000000000)=0xffffffff, 0x8)
eventfd2(0x6, 0x80001)

17m8.300052424s ago: executing program 4 (id=601):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f00000001c0)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0xfdb})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0xffffffffffffffff, 0x4, 0x7, 0x0, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x43, 0x1, 0xffffffffffffffff, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x6, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x40000, 0x4, 0x0, 0xfffffffffffffffb, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x40000000008, 0x2293332f, 0x6, 0x5, 0x1e, 0xc, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]})
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000080)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, 0xffffffffffffffff)
r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c119, &(0x7f0000000000)=0xe2})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r13, 0x1, 0x100)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r16 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r16, &(0x7f0000000200)=0x8, 0x8)

16m44.194580057s ago: executing program 4 (id=602):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b10000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b80)={0x0, &(0x7f0000000080), 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x100}], 0x100000000000010c)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8})
syz_kvm_vgic_v3_setup(r4, 0x1, 0x20)
close(0x4)
close(0x5)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x3})
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x88)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16m28.140060904s ago: executing program 4 (id=603):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
close(r11)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x1, 0x1000, 0x1000, &(0x7f0000c29000/0x1000)=nil})
r13 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bc2000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x3})

16m8.527469751s ago: executing program 5 (id=574):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="f3011813013c36000000004ee28398f8964346cbd98700000001908b9463d139887a01002e25000000000000ffff00", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0})

15m39.024685508s ago: executing program 36 (id=603):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x80)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
close(r11)
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x1, 0x1000, 0x1000, &(0x7f0000c29000/0x1000)=nil})
r13 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bc2000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x3})

15m18.526298934s ago: executing program 37 (id=574):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="f3011813013c36000000004ee28398f8964346cbd98700000001908b9463d139887a01002e25000000000000ffff00", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x40305839, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0})

3m18.150381998s ago: executing program 7 (id=623):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x300000c, 0x10, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
ioctl$KVM_CREATE_VM(r8, 0x401c5820, 0x20000006)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000000)=0x5) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000000)=@riscv64_v={0x8030000009000012, &(0x7f0000000080)=0x4}) (async)
ioctl$KVM_CREATE_VM(r3, 0x401c5820, 0x20000065)

3m7.304741993s ago: executing program 6 (id=624):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10002})
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000640)=[@smc={0x1e, 0x40, {0x84000011, [0x0, 0x4, 0x0, 0x4, 0x8001]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m52.347952813s ago: executing program 7 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0x8000ae8c, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r1)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x0, 0x0, 0x80, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x3, 0xa0)
r12 = eventfd2(0x6, 0x800)
ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000280)={r12, 0x9})
ioctl$KVM_IRQFD(r11, 0x4020ae76, 0x0)
close(r11)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
close(0xffffffffffffffff)
r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r13})
close(r1)
close(r13)

2m51.404148965s ago: executing program 6 (id=626):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r3})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x15)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000240)={0x0, &(0x7f00000006c0)=[@memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xb39, 0x5}}], 0x30}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m29.09180797s ago: executing program 6 (id=627):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000100)=0x4)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013c081, 0x7fff}}, @svc={0x122, 0x40, {0xc4000010, [0x5, 0x200, 0x4ef, 0x800, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x28)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, 0xffffffffffffffff, 0x2})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x2, 0x0, 0x2, 0xffffffffffffffff, 0xf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r12, 0x40000)
r13 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r13, 0x8})
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r13, 0x2})
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r13, 0x2})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)

2m22.973682384s ago: executing program 7 (id=628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x3, 0x7000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x4, 0x4000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x40000000, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x0, r4, 0xa})
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

1m59.359872943s ago: executing program 6 (id=629):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x84a02, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x77)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
r5 = ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0x40305828, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r6, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x4, 0x220)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

1m57.147041783s ago: executing program 7 (id=630):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_fp={0x60400000001000bc, &(0x7f0000000140)=0x7fffffffffffffff})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x400007})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000200)=@arm64={0xa, 0x6, 0xd, '\x00', 0x8})
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x2)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f82000/0x3000)=nil, r11, 0x200000c, 0x10, r9, 0x0)
r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xe4)
syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x46}], 0x1)
r13 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x2c)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000140)=0x20000000009})
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_fp={0x6040000000100097, &(0x7f0000000240)=0x4})
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff})

1m32.536738005s ago: executing program 6 (id=631):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r1, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x1010, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r7, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000011, [0x9, 0x7, 0x100, 0x7, 0x88]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r13, 0x4, 0x220)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})

1m17.71527044s ago: executing program 7 (id=632):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x80080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x7)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110001})
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x16)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x4, 0x82a9, 0x1}})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000000c0)=0x8})
syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, &(0x7f0000000380)=[@svc={0x122, 0x40, {0xc4000003, [0x6e, 0xdaa, 0x2, 0x401, 0x80]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0xe, 0x81, 0x6, 0x4}}, @msr={0x14, 0x20, {0x603000000013deb7}}, @hvc={0x32, 0x40, {0x40, [0x10, 0xd0, 0x1, 0x73c, 0xe]}}, @msr={0x14, 0x20, {0x603000000013802e, 0xa50f}}, @svc={0x122, 0x40, {0xffff, [0x3, 0x80000001, 0x7, 0x3, 0xc]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x6, 0xc, 0x6, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x1, 0xe, 0xa3, 0x7, 0x4}}, @hvc={0x32, 0x40, {0x80000000, [0x8000000000000001, 0x8, 0x9, 0x2, 0x8]}}, @mrs={0xbe, 0x18, {0xc06000000027942b}}, @mrs={0xbe, 0x18, {0x603000000013f100}}, @hvc={0x32, 0x40, {0x84000053, [0x9, 0x8e, 0x3, 0x3, 0x100]}}, @smc={0x1e, 0x40, {0x200, [0x2, 0x8, 0x5, 0x20000000000000, 0x7]}}, @eret={0xe6, 0x18, 0x4}, @svc={0x122, 0x40, {0x20, [0x8, 0x1, 0x1609, 0x2, 0x5]}}], 0x2c0}], 0x1, 0x0, &(0x7f0000000180)=[@featur1={0x1, 0x20}], 0x1)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000640)=[@eret={0xe6, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0x268}}, @eret={0xe6, 0x18, 0x89e}, @uexit={0x0, 0x18, 0x7}, @hvc={0x32, 0x40, {0xc4000010, [0x3, 0x4, 0x0, 0x1, 0x7fff]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x9, 0xfffffabf, 0x1, 0x2}}, @msr={0x14, 0x20, {0x603000000013df5b, 0x4}}, @hvc={0x32, 0x40, {0x84000009, [0x9, 0x1, 0x5, 0x1, 0xff]}}, @mrs={0xbe, 0x18, {0x603000000013c01c}}, @uexit={0x0, 0x18, 0x4}, @mrs={0xbe, 0x18, {0x603000000013801e}}, @irq_setup={0x46, 0x18, {0x0, 0x181}}, @mrs={0xbe, 0x18, {0x603000000013df51}}, @uexit={0x0, 0x18, 0x8000000000000001}, @mrs={0xbe, 0x18, {0x603000000013df4b}}, @smc={0x1e, 0x40, {0x8400000a, [0x5, 0x9, 0x7ff, 0xa, 0xb]}}, @smc={0x1e, 0x40, {0x80000000, [0xffffffffffffe067, 0x800, 0xb, 0x8, 0xf9]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x373}}, @uexit={0x0, 0x18, 0x3}, @hvc={0x32, 0x40, {0x200, [0x8a, 0x7, 0x0, 0x9]}}, @msr={0x14, 0x20, {0x603000000013c039, 0xffffffffffffff39}}, @irq_setup={0x46, 0x18, {0x2, 0x2}}, @irq_setup={0x46, 0x18, {0x2, 0x3d0}}, @smc={0x1e, 0x40, {0x400, [0x3, 0x2, 0x9, 0x132f, 0x8]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2d7}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x57}}, @msr={0x14, 0x20, {0x603000000013defb, 0x7fffffffffffffff}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x1, 0x8, 0x2}}], 0x3f8}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1m5.993139764s ago: executing program 6 (id=633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x300})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, <r5=>0xffffffffffffffff})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0xffffffffffffffff)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004219"], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

51.045768219s ago: executing program 7 (id=634):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@irq_setup={0x46, 0x0, {0x1, 0x3cc}}, @uexit={0x0, 0x0, 0x6}, @svc={0x122, 0x0, {0x84000052, [0x40000, 0x4, 0x7, 0xe1, 0x3]}}, @eret={0xe6, 0x0, 0x2}, @svc={0x122, 0x0, {0x86000001, [0x5fc, 0x6, 0x7, 0x3]}}, @irq_setup={0x46, 0x0, {0x1, 0x294}}, @hvc={0x32, 0x0, {0x84000002, [0x0, 0x8, 0x3c, 0x0, 0x800]}}, @msr={0x14, 0x0, {0x603000000013c298, 0xb71}}], 0xfffffcb2}, &(0x7f0000000280)=[@featur1={0x1, 0x28}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x1ff, 0xdddc1000, 0x0, r7, 0x4})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4020ae46, &(0x7f00000000c0)={0x100, 0x1000})

17.733400728s ago: executing program 38 (id=633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000})
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x300})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, <r5=>0xffffffffffffffff})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0xffffffffffffffff)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004219"], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

0s ago: executing program 39 (id=634):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@irq_setup={0x46, 0x0, {0x1, 0x3cc}}, @uexit={0x0, 0x0, 0x6}, @svc={0x122, 0x0, {0x84000052, [0x40000, 0x4, 0x7, 0xe1, 0x3]}}, @eret={0xe6, 0x0, 0x2}, @svc={0x122, 0x0, {0x86000001, [0x5fc, 0x6, 0x7, 0x3]}}, @irq_setup={0x46, 0x0, {0x1, 0x294}}, @hvc={0x32, 0x0, {0x84000002, [0x0, 0x8, 0x3c, 0x0, 0x800]}}, @msr={0x14, 0x0, {0x603000000013c298, 0xb71}}], 0xfffffcb2}, &(0x7f0000000280)=[@featur1={0x1, 0x28}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x1ff, 0xdddc1000, 0x0, r7, 0x4})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4020ae46, &(0x7f00000000c0)={0x100, 0x1000})

kernel console output (not intermixed with test programs):

[  397.291044][   T25] audit: type=1400 audit(396.480:60): avc:  denied  { read } for  pid=3171 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  415.757613][ T3171] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.615262][ T3171] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:20147' (ED25519) to the list of known hosts.
[  632.613616][   T25] audit: type=1400 audit(631.820:61): avc:  denied  { name_bind } for  pid=3325 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  633.537037][   T25] audit: type=1400 audit(632.750:62): avc:  denied  { execute } for  pid=3326 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  633.566797][   T25] audit: type=1400 audit(632.780:63): avc:  denied  { execute_no_trans } for  pid=3326 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  665.094733][   T25] audit: type=1400 audit(664.310:64): avc:  denied  { mounton } for  pid=3326 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  665.151490][   T25] audit: type=1400 audit(664.360:65): avc:  denied  { mount } for  pid=3326 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  665.243708][ T3326] cgroup: Unknown subsys name 'net'
[  665.317723][   T25] audit: type=1400 audit(664.530:66): avc:  denied  { unmount } for  pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  665.820099][ T3326] cgroup: Unknown subsys name 'cpuset'
[  665.953963][ T3326] cgroup: Unknown subsys name 'rlimit'
[  666.932625][   T25] audit: type=1400 audit(666.140:67): avc:  denied  { setattr } for  pid=3326 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  666.961536][   T25] audit: type=1400 audit(666.160:68): avc:  denied  { mounton } for  pid=3326 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  666.984080][   T25] audit: type=1400 audit(666.200:69): avc:  denied  { mount } for  pid=3326 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  668.048037][ T3329] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  668.076155][   T25] audit: type=1400 audit(667.280:70): avc:  denied  { relabelto } for  pid=3329 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  668.104518][   T25] audit: type=1400 audit(667.320:71): avc:  denied  { write } for  pid=3329 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  668.296981][   T25] audit: type=1400 audit(667.510:72): avc:  denied  { read } for  pid=3326 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  668.324533][   T25] audit: type=1400 audit(667.530:73): avc:  denied  { open } for  pid=3326 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  668.369995][ T3326] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  726.325357][   T25] audit: type=1400 audit(725.540:74): avc:  denied  { execmem } for  pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  730.266349][   T25] audit: type=1400 audit(729.480:76): avc:  denied  { open } for  pid=3333 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  730.281885][   T25] audit: type=1400 audit(729.460:75): avc:  denied  { read } for  pid=3334 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  730.352675][   T25] audit: type=1400 audit(729.550:77): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  730.580259][   T25] audit: type=1400 audit(729.790:78): avc:  denied  { module_request } for  pid=3333 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  730.612528][   T25] audit: type=1400 audit(729.820:79): avc:  denied  { module_request } for  pid=3334 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  731.682820][   T25] audit: type=1400 audit(730.870:80): avc:  denied  { sys_module } for  pid=3334 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  755.396300][ T3334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  755.798433][ T3334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  755.885904][ T3333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  756.162977][ T3333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  772.113143][ T3334] hsr_slave_0: entered promiscuous mode
[  772.166634][ T3334] hsr_slave_1: entered promiscuous mode
[  773.905453][ T3333] hsr_slave_0: entered promiscuous mode
[  773.973471][ T3333] hsr_slave_1: entered promiscuous mode
[  774.012311][ T3333] debugfs: 'hsr0' already exists in 'hsr'
[  774.030317][ T3333] Cannot create hsr debugfs directory
[  780.757259][   T25] audit: type=1400 audit(779.970:81): avc:  denied  { create } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  780.821268][   T25] audit: type=1400 audit(780.030:82): avc:  denied  { write } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  780.870933][   T25] audit: type=1400 audit(780.080:83): avc:  denied  { read } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  781.016628][ T3334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  781.391981][ T3334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  781.673149][ T3334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  782.137229][ T3334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  783.796710][ T3333] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  783.987259][ T3333] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  784.232138][ T3333] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  784.422720][ T3333] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  797.091332][ T3334] 8021q: adding VLAN 0 to HW filter on device bond0
[  800.393215][ T3333] 8021q: adding VLAN 0 to HW filter on device bond0
[  860.745487][ T3334] veth0_vlan: entered promiscuous mode
[  861.304635][ T3334] veth1_vlan: entered promiscuous mode
[  863.402358][ T3334] veth0_macvtap: entered promiscuous mode
[  863.774953][ T3334] veth1_macvtap: entered promiscuous mode
[  864.252587][ T3333] veth0_vlan: entered promiscuous mode
[  865.137177][ T3333] veth1_vlan: entered promiscuous mode
[  866.621660][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.677561][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.687332][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.698403][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.563415][ T3333] veth0_macvtap: entered promiscuous mode
[  869.346144][   T25] audit: type=1400 audit(868.460:84): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  869.452413][ T3333] veth1_macvtap: entered promiscuous mode
[  869.594355][   T25] audit: type=1400 audit(868.800:85): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.pXn5WM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  869.887865][   T25] audit: type=1400 audit(869.100:86): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  870.213026][   T25] audit: type=1400 audit(869.400:87): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.pXn5WM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  870.334123][   T25] audit: type=1400 audit(869.530:88): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/syzkaller.pXn5WM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  871.030115][   T25] audit: type=1400 audit(870.230:89): avc:  denied  { unmount } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  871.445981][   T25] audit: type=1400 audit(870.560:90): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  871.595743][   T25] audit: type=1400 audit(870.810:91): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="gadgetfs" ino=3764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  871.794569][   T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.856671][ T3386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.871122][ T3386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.890550][ T3386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.917170][   T25] audit: type=1400 audit(871.130:92): avc:  denied  { mount } for  pid=3334 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  872.040365][   T25] audit: type=1400 audit(871.200:93): avc:  denied  { mounton } for  pid=3334 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  873.651886][ T3334] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  875.130784][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  875.148493][   T25] audit: type=1400 audit(874.340:95): avc:  denied  { read write } for  pid=3334 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  875.180932][   T25] audit: type=1400 audit(874.390:96): avc:  denied  { open } for  pid=3334 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  875.241179][   T25] audit: type=1400 audit(874.450:97): avc:  denied  { ioctl } for  pid=3334 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  885.631237][   T25] audit: type=1400 audit(884.790:98): avc:  denied  { read } for  pid=3490 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  885.758403][   T25] audit: type=1400 audit(884.940:99): avc:  denied  { open } for  pid=3490 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  886.813286][   T25] audit: type=1400 audit(886.010:100): avc:  denied  { ioctl } for  pid=3490 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  905.941267][   T25] audit: type=1400 audit(905.140:101): avc:  denied  { write } for  pid=3502 comm="syz.1.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  918.699933][   T25] audit: type=1400 audit(917.900:102): avc:  denied  { create } for  pid=3509 comm="syz.0.7" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  927.085476][   T25] audit: type=1400 audit(926.250:103): avc:  denied  { execute } for  pid=3514 comm="syz.0.8" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  933.437540][   T25] audit: type=1400 audit(932.650:104): avc:  denied  { ioctl } for  pid=3517 comm="syz.1.9" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xae42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  935.027260][   T25] audit: type=1400 audit(934.240:105): avc:  denied  { append } for  pid=3517 comm="syz.1.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  990.566710][   T25] audit: type=1400 audit(989.770:106): avc:  denied  { setattr } for  pid=3546 comm="syz.1.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1506.265042][ T3839] kvm [3839]: Failed to find VMA for hva 0x20c01000
[ 1571.004012][ T3875] kvm [3875]: Failed to find VMA for hva 0x21016000
[ 1816.772502][ T4015] kvm [4015]: Failed to find VMA for hva 0x20be7000
[ 2073.706009][ T4169] kvm [4169]: Failed to find VMA for hva 0x20bc6000
[ 2234.087739][ T4244] kvm [4244]: Failed to find VMA for hva 0x20c01000
[ 2324.654997][   T25] audit: type=1400 audit(2323.860:107): avc:  denied  { map } for  pid=4296 comm="syz.0.246" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=17057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2324.737826][   T25] audit: type=1400 audit(2323.950:108): avc:  denied  { read } for  pid=4296 comm="syz.0.246" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=17057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3085.877926][   T25] audit: type=1400 audit(3085.090:109): avc:  denied  { map } for  pid=4725 comm="syz.1.380" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 3143.555180][   T25] audit: type=1400 audit(3142.770:110): avc:  denied  { write } for  pid=4761 comm="syz.1.392" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=24031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3315.321026][   T25] audit: type=1400 audit(3314.500:111): avc:  denied  { map } for  pid=4850 comm="syz.0.421" path="pipe:[2770]" dev="pipefs" ino=2770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 3390.862193][   T25] audit: type=1400 audit(3390.050:112): avc:  denied  { ioctl } for  pid=4901 comm="syz.0.435" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=26600 ioctlcmd=0xaeae scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3433.369854][   T25] audit: type=1400 audit(3432.570:113): avc:  denied  { execute } for  pid=4926 comm="syz.0.444" path="/223/T" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 3791.385626][ T3387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3792.902443][ T3387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3793.855805][ T3387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3795.322701][ T3387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3809.457993][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3809.567043][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3809.627746][ T3387] bond0 (unregistering): Released all slaves
[ 3810.661310][ T3387] hsr_slave_0: left promiscuous mode
[ 3810.740758][ T3387] hsr_slave_1: left promiscuous mode
[ 3811.118123][ T3387] veth1_macvtap: left promiscuous mode
[ 3811.151781][ T3387] veth0_macvtap: left promiscuous mode
[ 3811.157230][ T3387] veth1_vlan: left promiscuous mode
[ 3811.181645][ T3387] veth0_vlan: left promiscuous mode
[ 3830.703941][ T3387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3832.108394][ T3387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3833.163024][ T3387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3834.344149][ T3387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3844.833650][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3845.256638][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3857.224965][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3857.382346][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3857.475457][ T3387] bond0 (unregistering): Released all slaves
[ 3858.835763][ T3387] hsr_slave_0: left promiscuous mode
[ 3858.921126][ T3387] hsr_slave_1: left promiscuous mode
[ 3859.580010][ T3387] veth1_macvtap: left promiscuous mode
[ 3859.583633][ T3387] veth0_macvtap: left promiscuous mode
[ 3859.605026][ T3387] veth1_vlan: left promiscuous mode
[ 3859.613098][ T3387] veth0_vlan: left promiscuous mode
[ 3874.447002][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3874.961468][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3884.784538][ T5112] hsr_slave_0: entered promiscuous mode
[ 3884.824128][ T5112] hsr_slave_1: entered promiscuous mode
[ 3895.426807][ T5117] hsr_slave_0: entered promiscuous mode
[ 3895.475093][ T5117] hsr_slave_1: entered promiscuous mode
[ 3895.512092][ T5117] debugfs: 'hsr0' already exists in 'hsr'
[ 3895.520148][ T5117] Cannot create hsr debugfs directory
[ 3898.363101][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3898.796671][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3900.172996][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3900.524804][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3913.528196][ T5117] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3914.051575][ T5117] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3914.373005][ T5117] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3914.764305][ T5117] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3930.282423][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3939.827380][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4025.774367][ T5112] veth0_vlan: entered promiscuous mode
[ 4026.852922][ T5112] veth1_vlan: entered promiscuous mode
[ 4030.493140][ T5112] veth0_macvtap: entered promiscuous mode
[ 4031.121378][ T5112] veth1_macvtap: entered promiscuous mode
[ 4034.690643][ T5133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4034.816822][ T5133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4034.842270][ T5133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4035.010845][ T5133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4041.464500][ T5117] veth0_vlan: entered promiscuous mode
[ 4043.061706][ T5117] veth1_vlan: entered promiscuous mode
[ 4047.082207][ T5117] veth0_macvtap: entered promiscuous mode
[ 4047.963804][ T5117] veth1_macvtap: entered promiscuous mode
[ 4052.327819][ T4963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4052.373365][ T4580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4052.441462][ T3387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4052.541046][ T3387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4465.014541][ T5267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4467.142027][ T5267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4469.067611][ T5267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4470.934390][ T5267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4493.072904][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4493.481562][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4493.837750][ T5267] bond0 (unregistering): Released all slaves
[ 4495.713189][ T5267] hsr_slave_0: left promiscuous mode
[ 4495.881570][ T5267] hsr_slave_1: left promiscuous mode
[ 4496.582760][ T5267] veth1_macvtap: left promiscuous mode
[ 4496.627490][ T5267] veth0_macvtap: left promiscuous mode
[ 4496.642361][ T5267] veth1_vlan: left promiscuous mode
[ 4496.682543][ T5267] veth0_vlan: left promiscuous mode
[ 4600.027477][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4600.423961][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4638.954030][ T5567] hsr_slave_0: entered promiscuous mode
[ 4639.065521][ T5567] hsr_slave_1: entered promiscuous mode
[ 4664.013082][ T5567] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4664.394357][ T5567] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4664.954870][ T5567] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4665.438455][ T5567] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4701.314033][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4872.234258][ T5567] veth0_vlan: entered promiscuous mode
[ 4873.732957][ T5567] veth1_vlan: entered promiscuous mode
[ 4878.330688][ T5567] veth0_macvtap: entered promiscuous mode
[ 4879.293793][ T5567] veth1_macvtap: entered promiscuous mode
[ 4884.214120][ T5574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4884.222284][ T5574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4884.271239][ T3387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4884.295767][ T3387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4952.730113][ T5569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4955.156992][ T5569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4957.990985][ T5569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4960.222184][ T5569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4986.337811][ T5569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4986.950682][ T5569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4987.263448][ T5569] bond0 (unregistering): Released all slaves
[ 4990.164104][ T5569] hsr_slave_0: left promiscuous mode
[ 4990.461953][ T5569] hsr_slave_1: left promiscuous mode
[ 4991.542271][ T5569] veth1_macvtap: left promiscuous mode
[ 4991.577485][ T5569] veth0_macvtap: left promiscuous mode
[ 4991.602042][ T5569] veth1_vlan: left promiscuous mode
[ 4991.643023][ T5569] veth0_vlan: left promiscuous mode
[ 5100.501022][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5100.862855][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5147.243128][ T5852] hsr_slave_0: entered promiscuous mode
[ 5147.382628][ T5852] hsr_slave_1: entered promiscuous mode
[ 5147.462397][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[ 5147.466418][ T5852] Cannot create hsr debugfs directory
[ 5173.340851][ T5852] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 5173.912434][ T5852] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 5174.374736][ T5852] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5174.928564][ T5852] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5216.854805][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5403.253687][ T5852] veth0_vlan: entered promiscuous mode
[ 5404.631811][ T5852] veth1_vlan: entered promiscuous mode
[ 5409.557171][ T5852] veth0_macvtap: entered promiscuous mode
[ 5410.742675][ T5852] veth1_macvtap: entered promiscuous mode
[ 5416.012388][ T5175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5416.020762][ T5175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5416.045352][ T5175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5416.154594][ T3386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5504.531433][ T5580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5508.473372][ T5580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5510.506507][ T5580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5512.058080][ T5580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5536.943964][ T5580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5537.242860][ T5580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5537.473079][ T5580] bond0 (unregistering): Released all slaves
[ 5539.189589][ T5580] hsr_slave_0: left promiscuous mode
[ 5539.285956][ T5580] hsr_slave_1: left promiscuous mode
[ 5540.044825][ T5580] veth1_macvtap: left promiscuous mode
[ 5540.071486][ T5580] veth0_macvtap: left promiscuous mode
[ 5540.082613][ T5580] veth1_vlan: left promiscuous mode
[ 5540.108221][ T5580] veth0_vlan: left promiscuous mode
[ 5575.841311][ T5580] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5577.431417][ T5580] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5578.992360][ T5580] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5580.760946][ T5580] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5605.703280][ T5580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5605.981735][ T5580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5606.193499][ T5580] bond0 (unregistering): Released all slaves
[ 5610.220167][ T5580] hsr_slave_0: left promiscuous mode
[ 5610.282900][ T5580] hsr_slave_1: left promiscuous mode
[ 5611.184450][ T5580] veth1_macvtap: left promiscuous mode
[ 5611.250335][ T5580] veth0_macvtap: left promiscuous mode
[ 5611.283621][ T5580] veth1_vlan: left promiscuous mode
[ 5611.299380][ T5580] veth0_vlan: left promiscuous mode
[ 5652.093887][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5652.592375][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5662.547584][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5663.008071][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5687.860683][ T6136] hsr_slave_0: entered promiscuous mode
[ 5687.955773][ T6136] hsr_slave_1: entered promiscuous mode
[ 5696.964980][ T6144] hsr_slave_0: entered promiscuous mode
[ 5697.066859][ T6144] hsr_slave_1: entered promiscuous mode
[ 5697.101850][ T6144] debugfs: 'hsr0' already exists in 'hsr'
[ 5697.104954][ T6144] Cannot create hsr debugfs directory
[ 5715.708270][ T6136] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 5716.844424][ T6136] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 5717.505519][ T6136] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 5718.721130][ T6136] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 5726.886358][ T6144] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5727.433887][ T6144] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5728.088500][ T6144] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5728.862476][ T6144] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5759.092512][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5766.454759][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5939.624373][ T6136] veth0_vlan: entered promiscuous mode
[ 5941.004461][ T6136] veth1_vlan: entered promiscuous mode
[ 5946.574177][ T6144] veth0_vlan: entered promiscuous mode
[ 5948.416377][ T6136] veth0_macvtap: entered promiscuous mode
[ 5949.827606][ T6136] veth1_macvtap: entered promiscuous mode
[ 5950.201942][ T6144] veth1_vlan: entered promiscuous mode
[ 5957.924681][ T5175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5957.937903][ T5175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5957.991727][ T5175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5958.012445][ T5175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5959.052505][ T6144] veth0_macvtap: entered promiscuous mode
[ 5960.915885][ T6144] veth1_macvtap: entered promiscuous mode
[ 5969.886709][ T5580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5969.890597][ T5580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5969.923119][ T5580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5969.930125][ T5580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6541.317518][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6541.728210][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6559.152749][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6559.675142][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6600.223121][ T6558] hsr_slave_0: entered promiscuous mode
[ 6600.394649][ T6558] hsr_slave_1: entered promiscuous mode
[ 6600.543782][ T6558] debugfs: 'hsr0' already exists in 'hsr'
[ 6600.620482][ T6558] Cannot create hsr debugfs directory
[ 6620.897762][ T6565] hsr_slave_0: entered promiscuous mode
[ 6621.102626][ T6565] hsr_slave_1: entered promiscuous mode
[ 6621.137575][ T6565] debugfs: 'hsr0' already exists in 'hsr'
[ 6621.192165][ T6565] Cannot create hsr debugfs directory
[ 6638.434582][ T6558] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 6640.371736][ T6558] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 6641.791244][ T6558] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 6643.670684][ T6558] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 6665.393410][ T6565] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6666.312943][ T6565] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6667.106103][ T6565] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6667.947213][ T6565] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6704.334201][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6722.015444][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6808.331460][   T27] INFO: task syz.7.634:6545 blocked for more than 430 seconds.
[ 6808.343664][   T27]       Not tainted syzkaller #0
[ 6808.410571][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6808.414827][   T27] task:syz.7.634       state:D stack:0     pid:6545  tgid:6545  ppid:6144   task_flags:0x400040 flags:0x00000011
[ 6808.422382][   T27] Call trace:
[ 6808.422903][   T27]  __switch_to+0x584/0xb00 (T)
[ 6808.425050][   T27]  __schedule+0x200c/0x3428
[ 6808.425641][   T27]  schedule+0xac/0x27c
[ 6808.426117][   T27]  schedule_timeout+0x68/0x1ec
[ 6808.426622][   T27]  do_wait_for_common+0x28c/0x440
[ 6808.427078][   T27]  wait_for_completion+0x44/0x5c
[ 6808.427582][   T27]  __synchronize_srcu+0x2a4/0x320
[ 6808.428085][   T27]  synchronize_srcu+0x3d0/0x4f8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6808.648387][   T27]  mmu_notifier_unregister+0x320/0x428
[ 6808.684122][   T27]  kvm_put_kvm+0x698/0xbe0
[ 6808.712339][   T27]  kvm_vm_release+0x58/0x78
[ 6808.782665][   T27]  __fput+0x4ac/0x978
[ 6808.801842][   T27]  ____fput+0x20/0x58
[ 6808.802500][   T27]  task_work_run+0x1b8/0x250
[ 6808.802965][   T27]  exit_to_user_mode_loop+0x110/0x188
[ 6808.803476][   T27]  el0_svc+0x17c/0x238
[ 6808.803978][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 6808.804494][   T27]  el0t_64_sync+0x198/0x19c
[ 6808.903613][   T27] 
[ 6808.903613][   T27] Showing all locks held in the system:
[ 6808.930076][   T27] 1 lock held by khungtaskd/27:
[ 6808.930667][   T27]  #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 6808.933410][   T27] 1 lock held by syslogd/3130:
[ 6808.933800][   T27] 1 lock held by klogd/3134:
[ 6808.934152][   T27] 2 locks held by getty/3200:
[ 6808.934496][   T27]  #0: a6f000001231e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6808.936342][   T27]  #1: 42ff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 6808.938069][   T27] 2 locks held by syz-executor/3326:
[ 6808.938431][   T27] 3 locks held by kworker/u4:7/3387:
[ 6809.221772][   T27] 3 locks held by kworker/u4:6/4580:
[ 6809.224480][   T27] 3 locks held by kworker/u4:9/5175:
[ 6809.226479][   T27] 3 locks held by kworker/u4:12/6096:
[ 6809.226882][   T27] 2 locks held by kworker/u4:13/6150:
[ 6809.227245][   T27] 2 locks held by kworker/u4:14/6275:
[ 6809.227604][   T27]  #0: bcf000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 6809.300894][   T27]  #1: ffff80008ed77c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 6809.302566][   T27] 3 locks held by kworker/u4:15/6346:
[ 6809.302895][   T27] 2 locks held by kworker/0:3/6373:
[ 6809.303238][   T27] 2 locks held by syz.6.633/6538:
[ 6809.303630][   T27] 2 locks held by kworker/u4:5/6655:
[ 6809.303936][   T27]  #0: bcf000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 6809.305754][   T27]  #1: ffff80008fe37c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 6809.307401][   T27] 3 locks held by kworker/u4:16/6670:
[ 6809.307729][   T27] 1 lock held by modprobe/6697:
[ 6809.308030][   T27] 3 locks held by modprobe/6698:
[ 6809.512852][   T27] 
[ 6809.520119][   T27] =============================================
[ 6809.520119][   T27] 
[ 6809.521183][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 6809.526477][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6809.528140][   T27] Hardware name: linux,dummy-virt (DT)
[ 6809.529198][   T27] Call trace:
[ 6809.530150][   T27]  show_stack+0x2c/0x3c (C)
[ 6809.531283][   T27]  __dump_stack+0x30/0x40
[ 6809.532128][   T27]  dump_stack_lvl+0x30/0x12c
[ 6809.533162][   T27]  dump_stack+0x1c/0x28
[ 6809.534163][   T27]  vpanic+0x1d4/0x4e4
[ 6809.535127][   T27]  vpanic+0x0/0x4e4
[ 6809.536103][   T27]  hung_task_panic+0x0/0x2c
[ 6809.537086][   T27]  kthread+0x794/0x99c
[ 6809.538038][   T27]  ret_from_fork+0x10/0x20
[ 6809.540023][   T27] Kernel Offset: disabled
[ 6809.540881][   T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 6809.542131][   T27] Memory Limit: none
[ 6809.546288][   T27] Rebooting in 86400 seconds..