last executing test programs:

1h10m55.560101731s ago: executing program 0 (id=41):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r5, 0x603000000013df02, 0x8000)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffffe})
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=[@featur1={0x1, 0x60}], 0x1)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_assert_reg(r5, 0x603000000013df02, 0x8000) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffffe}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=[@featur1={0x1, 0x60}], 0x1) (async)

1h10m14.090272898s ago: executing program 32 (id=40):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f0000000100)=0x10})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34)

1h10m8.852939919s ago: executing program 33 (id=41):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r5, 0x603000000013df02, 0x8000)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffffe})
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=[@featur1={0x1, 0x60}], 0x1)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_assert_reg(r5, 0x603000000013df02, 0x8000) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffffe}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=[@featur1={0x1, 0x60}], 0x1) (async)

1h2m35.981884454s ago: executing program 34 (id=54):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000000)={0x3, 0x4000000000000000})
r4 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xb704, 0x0)

1h2m16.598398872s ago: executing program 35 (id=56):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x810, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4c9f0445c085486580143226c0ead9a1620ba43b400c1596a743ad4913923c81ca0ae477090bd3ac1abfc00000000000000f46600", 0x0, 0x48)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000d33000/0x3000)=nil, 0x930, 0x4, 0x11, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000d5e000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r2, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000004, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000834000/0x3000)=nil, 0x930, 0x100000a, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

54m38.763691664s ago: executing program 4 (id=65):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x2, 0x10000})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x4000}) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x4000})
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0)) (async)
ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f00000000c0))
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0x8, 0x2, 0x1ff})
ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x0, 0x100000001, &(0x7f0000000140)=0x5})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000001c0)={0x8, 0x100})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x7ff, 0x7})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x5a21, 0x1}) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x5a21, 0x1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000002c0)={0x5, 0x8})
ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0xc4000007, [0x10000, 0x3ff, 0x3, 0x86, 0x9]}}, @eret={0xe6, 0x18, 0x6}, @code={0xa, 0x84, {"204e8ed20080b8f2a10080d2420180d2c30080d2240080d2020000d4404b86d20040b0f2410080d2420080d2830180d2c40080d2020000d460659dd200e0b0f2810080d2c20180d2230180d2040180d2020000d40050206e007008d5000008d500008013000000aa0060000c000028d5"}}, @smc={0x1e, 0x40, {0xc4000003, [0x6, 0x5, 0x9, 0x72, 0xe]}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x0, 0x383}}, @hvc={0x32, 0x40, {0x84000014, [0x32a, 0x75b, 0x2, 0x0, 0x5]}}, @hvc={0x32, 0x40, {0xc4000053, [0x4, 0x3, 0x40, 0x7, 0x10001]}}, @msr={0x14, 0x20, {0x603000000013c4ce, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x0, 0xc, 0x55b, 0xa11}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @generic={0xe6ee0000, 0x262, 0xfffffffffffffff8, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x80, 0x8001, 0xc}}, @hvc={0x32, 0x40, {0x8400000d, [0x1, 0xffffffffffffe33c, 0x80, 0x6, 0x1000]}}, @code={0xa, 0x84, {"00806088000008d500a99dd20060b8f2210180d2c20080d2e30080d2040180d2020000d4000008d5007008d5c04d82d20040b8f2410180d2420180d2030180d2e40180d2020000d4007008d560f981d20060b0f2410180d2a20180d2c30180d2a40180d2020000d400000008000028d5"}}, @irq_setup={0x46, 0x18, {0x4, 0x19e}}], 0x368}, &(0x7f00000006c0)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000700)={0xffff, 0x1000}) (async)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000700)={0xffff, 0x1000})
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000740))
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000bc0)={0x10002, 0x1c0, 0x400, &(0x7f00000007c0)=[0x5, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x5, 0xfffffffffffffffd, 0x6, 0x3, 0x8, 0x101, 0x3, 0x7, 0x9, 0x6, 0x6, 0x7ff, 0x4, 0x1, 0x2, 0x401, 0x7, 0x5, 0x0, 0x9, 0x5, 0x4, 0x9, 0x4, 0x3, 0x3, 0xa, 0x6, 0x9, 0x7fffffffffffffff, 0x9, 0xf, 0x8, 0x4, 0x8, 0x8, 0x7fffffff, 0x0, 0x0, 0x8, 0x20, 0x9, 0x10001, 0x1, 0x796, 0x8, 0x6, 0x9, 0xc0, 0x1, 0x7, 0x0, 0x8b, 0x4, 0xd, 0x5, 0xffffffffffffffff, 0x3, 0x1, 0x9, 0x6, 0x7f, 0x9, 0x9, 0x4, 0x1000, 0xc, 0xff, 0xdb, 0x8, 0x7, 0x938a, 0x100000001, 0x3, 0x100000001, 0x8, 0x2, 0x3, 0x3d, 0x4, 0xb1d0, 0x10, 0xfff, 0xb66e, 0x2, 0x1c0000, 0x6, 0x3ff, 0x2, 0x2, 0xe7490de, 0xfffffffffffffffa, 0x7, 0x3, 0x10000, 0x81, 0x7f, 0xc, 0x8, 0x547, 0x0, 0x0, 0x7, 0xc, 0x7, 0xf2d, 0x7, 0xb4, 0x8, 0x5, 0x4, 0xc5b3, 0xeb, 0x7ff, 0x2, 0x4, 0x1c3, 0xa3, 0x992c, 0x6, 0x2dbf, 0x3]})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000c00)={r4, 0x8, 0x4, r4}) (async)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000c00)={r4, 0x8, 0x4, r4})
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000c40))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000c80)={0x8000000, 0xc000})
ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1a)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x80000000)
ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000cc0)) (async)
ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000cc0))
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000d00)={r4, 0x9, 0x3, r4})

54m38.333568027s ago: executing program 5 (id=66):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x46cdc0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffa)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
close(r1)
close(r2) (async)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_assert_reg(0xffffffffffffffff, 0x603000000013deff, 0x8000)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x401}})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) (async)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
r13 = syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x6, 0x218070195c17f3d1, 0x0})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305828, &(0x7f0000000040)=@attr_arm64={0x1000000, 0x7, 0x2, &(0x7f00000000c0)=0xfffffffffffffff7})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)

54m26.113693748s ago: executing program 4 (id=67):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x8, 0x80800)
r4 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7ffffffffffffffe, 0xeeee0000, 0x8, r4})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r3, 0x2})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r3, 0x3})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x1000008080000})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000480)=@arm64_fw={0x6030000000140000, &(0x7f0000000440)=0xdd})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x8})
r13 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013c00a}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

54m20.442802084s ago: executing program 5 (id=68):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000000000)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000b0a000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bb8000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, &(0x7f00000004c0), 0x138}, &(0x7f00000000c0)=[@featur1={0x1, 0x9}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffd)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0x80111500, 0x20000000)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r10, 0x3, 0x13, r8, 0x0)
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2a)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x2c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000003000d5, &(0x7f0000000100)=0x7fffffff})
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0xa0)
r13 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x15)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000000)={0x7})
eventfd2(0x0, 0x80800)

54m3.074281608s ago: executing program 5 (id=69):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

54m2.705601205s ago: executing program 4 (id=70):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
r4 = eventfd2(0x1, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x3})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@hvc={0x32, 0x40, {0x400, [0x8, 0x8, 0xffffffffffff2489, 0x7771, 0x100000000]}}, @uexit={0x0, 0x18, 0xf59}, @hvc={0x32, 0x40, {0x3f000000, [0xfffffffffffffffe, 0x44, 0x7, 0x1000, 0x1ff]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x1, 0x8, 0x6}}, @hvc={0x32, 0x40, {0x0, [0x9e, 0xa7, 0x62, 0xe4f, 0x5]}}, @eret={0xe6, 0x18, 0x5}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x8f}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x80, 0x7fffffffffffffff, 0x4}}, @svc={0x122, 0x40, {0x86000000, [0x4, 0x80000001, 0x9, 0x6, 0x1]}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0x4, [0x80, 0x6, 0x4, 0xbc, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x40, 0x7, 0xb}}, @svc={0x122, 0x40, {0x84000009, [0x8, 0x7fffffffffffffff, 0xe, 0x8000000000000001]}}, @irq_setup={0x46, 0x18, {0x2, 0x2c0}}, @msr={0x14, 0x20, {0x603000000013f080, 0xd4}}, @smc={0x1e, 0x40, {0x8600ff01, [0x7, 0x16fa, 0x7ff, 0x3, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x6, 0x5}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x2, 0xf, 0x7, 0xfffffffa, 0x2}}, @smc={0x1e, 0x40, {0x84000003, [0x8, 0x3, 0xf8, 0x5, 0x6]}}], 0x388}, &(0x7f0000000140)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

53m49.592763577s ago: executing program 5 (id=71):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64)
r4 = eventfd2(0x8, 0x80800) (rerun: 64)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r4, 0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r4, 0x3}) (async, rerun: 32)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xeeee8000}) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
write$eventfd(r5, &(0x7f00000001c0)=0x7ffffff, 0xfffffd77) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x1, 0xf000, 0x1, r4, 0x6})

53m45.453625397s ago: executing program 4 (id=72):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve={0x6080000000150377, 0x0})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
syz_kvm_vgic_v3_setup(r4, 0x0, 0x60)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000fb6000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r6, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)

53m33.920230528s ago: executing program 5 (id=73):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x450000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000)
write$eventfd(r7, &(0x7f0000000000), 0xfffffdef)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000)
write$eventfd(r9, &(0x7f0000000040), 0x8)
r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r3, 0x1000014, 0x5c1fd1b6565d2f2, r10, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f00000000c0)=ANY=[])
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

53m23.149895101s ago: executing program 4 (id=74):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x6, 0x2000, 0x2000, &(0x7f0000ec1000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r1, 0xae03, 0xbb)

53m19.090995234s ago: executing program 5 (id=75):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x100000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
close(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

53m7.320898308s ago: executing program 4 (id=76):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x6030000000139808}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x4, 0x5e, 0x1}})

52m31.359783598s ago: executing program 36 (id=75):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x100000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
close(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

52m17.512434844s ago: executing program 37 (id=76):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x6030000000139808}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x4, 0x5e, 0x1}})

43m28.090565473s ago: executing program 7 (id=84):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x8801, 0x800)
r4 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x5, 0x2, r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x5, 0x2, r4})
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

43m15.954433111s ago: executing program 6 (id=85):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0x4030582a, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x120}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0xdf)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r12, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r12, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

43m3.96001672s ago: executing program 7 (id=86):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x7, <r6=>0xffffffffffffffff})
ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f0000000000))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0xeffffffb, 0x80800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r9, 0x1})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r9, 0x3})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r9, 0xb})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x541b, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x240)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
write$eventfd(r14, &(0x7f00000001c0), 0xf001)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r15=>0xffffffffffffffff, 0x1})
write$eventfd(r15, &(0x7f00000000c0)=0x8, 0x8)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r17=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

42m51.27393386s ago: executing program 6 (id=87):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x9, 0x80, 0x0, 0xfffffffd, 0x10, 0xfc, 0x61, 0x4, 0x2, 0x43, 0x7, 0x0, 0x5d2f, 0x9, 0xf8, 0x0, 0xfa, 0x7, '\x00', 0x2, 0x8000000000000001})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xaa)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000180))
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r8, 0x8927, 0x110c230020)

42m33.043883581s ago: executing program 7 (id=88):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)

42m28.673490322s ago: executing program 6 (id=89):
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xc0189436, 0x20004000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0x648)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x603000000013deed}}, @msr={0x14, 0x0, {0x603000000013c102, 0x80}}, @mrs={0xbe, 0x18, {0x603000000013de87}}, @eret={0xe6, 0x18, 0x2076}, @eret={0xe6, 0x18}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x4, 0x2}}, @msr={0x14, 0x20, {0x603000000013c4f6, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013c527}}, @smc={0x1e, 0x40, {0x3f000000, [0xafb19a2, 0x906, 0x2, 0xd, 0xedbe]}}], 0x165}, &(0x7f00000001c0)=[@featur2={0x1, 0xc4}], 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000200)=@attr_pmu_init)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

42m14.234615166s ago: executing program 7 (id=90):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x6030000000100010, &(0x7f0000000100)=0x2})
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, 0x0, 0xa00f2, 0x408)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x541b, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0xdddd0001, 0x37d03030d7a92616})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x101f8, 0x7, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0xdddd0000, 0x8000})
r11 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

42m6.211864418s ago: executing program 6 (id=91):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x220)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xb704, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0})

41m51.218297084s ago: executing program 7 (id=92):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

41m46.587803533s ago: executing program 6 (id=93):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0xfffffffffffffffe)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = eventfd2(0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0xa, 0x4}})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r11, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_init)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r7, &(0x7f0000000180)=0x5, 0xfffffde3)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

41m37.143225292s ago: executing program 7 (id=94):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8, [0x99a, 0x2a, 0x74fb, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0})
r15 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000002, [0x99b, 0x100000001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)

41m21.598538575s ago: executing program 6 (id=95):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r6, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

40m49.008236674s ago: executing program 38 (id=94):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8, [0x99a, 0x2a, 0x74fb, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0})
r15 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000002, [0x99b, 0x100000001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)

40m31.118287564s ago: executing program 39 (id=95):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x3, 0x0})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close(r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r6, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

31m23.87541531s ago: executing program 8 (id=96):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x6243, 0x5}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000080)=0x2})
r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x140)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x31)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000600)={0x0, &(0x7f0000000180)=[@eret={0xe6, 0x18, 0x2}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0xa71, 0x2}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x2fa}}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x54, {"00e4006f0000181e000000910020002f007008d5000028d5a0ee83d200a0b0f2210180d2e20180d2a30080d2c40180d2020000d400a0400d003c409300c0271e"}}, @code={0xa, 0x6c, {"0080401f000028d5204f99d200c0b8f2210180d2420080d2c30080d2640180d2020000d40000301e00e39fd20060b8f2210180d2a20080d2e30080d2440180d2020000d4008008d50000600d0008c078006c200e007008d5"}}, @code={0xa, 0x9c, {"c01790d200e0b0f2e10180d2820180d2030180d2a40080d2020000d4007008d5008008d500f083d20000b8f2010080d2420080d2630180d2a40180d2020000d400b4207e007008d520dc82d20080b8f2010180d2420080d2e30180d2240080d2020000d40010000e00399bd20020b0f2c10080d2a20180d2c30080d2240080d2020000d40000c029"}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x52f, 0xbb5, 0x4}}, @smc={0x1e, 0x40, {0x8400000f, [0xfffffffffffffffb, 0x2, 0xda, 0xfffffffffffff875, 0x1ed]}}, @hvc={0x32, 0x40, {0x8, [0x5, 0x5, 0x6, 0xedbe, 0x9]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3d4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x200, 0x7f, 0x4}}, @svc={0x122, 0x40, {0x84000014, [0xda3c, 0x4, 0x100, 0x1, 0xe45]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x2, 0x3}}, @svc={0x122, 0x40, {0x84000004, [0x1, 0x3, 0x2, 0x9, 0x8]}}, @code={0xa, 0x84, {"007008d500d8215ec07097d200a0b8f2810180d2820180d2030080d2e40080d2020000d460948cd20080b8f2410180d2420080d2630080d2a40180d2020000d40040211e00e0c00d007008d5603191d20060b8f2e10080d2620180d2230180d2e40080d2020000d40040002f0078205e"}}, @msr={0x14, 0x20, {0x603000000013c529, 0x1d}}, @uexit={0x0, 0x18, 0x4}], 0x470}, &(0x7f0000000640)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0x7d)

31m1.070023511s ago: executing program 9 (id=97):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x10004, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0xfffffffffffffff7, 0x0})

30m34.96071951s ago: executing program 40 (id=96):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x6243, 0x5}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000080)=0x2})
r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x140)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x31)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000600)={0x0, &(0x7f0000000180)=[@eret={0xe6, 0x18, 0x2}, @eret={0xe6, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0xa71, 0x2}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x2fa}}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x54, {"00e4006f0000181e000000910020002f007008d5000028d5a0ee83d200a0b0f2210180d2e20180d2a30080d2c40180d2020000d400a0400d003c409300c0271e"}}, @code={0xa, 0x6c, {"0080401f000028d5204f99d200c0b8f2210180d2420080d2c30080d2640180d2020000d40000301e00e39fd20060b8f2210180d2a20080d2e30080d2440180d2020000d4008008d50000600d0008c078006c200e007008d5"}}, @code={0xa, 0x9c, {"c01790d200e0b0f2e10180d2820180d2030180d2a40080d2020000d4007008d5008008d500f083d20000b8f2010080d2420080d2630180d2a40180d2020000d400b4207e007008d520dc82d20080b8f2010180d2420080d2e30180d2240080d2020000d40010000e00399bd20020b0f2c10080d2a20180d2c30080d2240080d2020000d40000c029"}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x52f, 0xbb5, 0x4}}, @smc={0x1e, 0x40, {0x8400000f, [0xfffffffffffffffb, 0x2, 0xda, 0xfffffffffffff875, 0x1ed]}}, @hvc={0x32, 0x40, {0x8, [0x5, 0x5, 0x6, 0xedbe, 0x9]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3d4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x200, 0x7f, 0x4}}, @svc={0x122, 0x40, {0x84000014, [0xda3c, 0x4, 0x100, 0x1, 0xe45]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x2, 0x3}}, @svc={0x122, 0x40, {0x84000004, [0x1, 0x3, 0x2, 0x9, 0x8]}}, @code={0xa, 0x84, {"007008d500d8215ec07097d200a0b8f2810180d2820180d2030080d2e40080d2020000d460948cd20080b8f2410180d2420080d2630080d2a40180d2020000d40040211e00e0c00d007008d5603191d20060b8f2e10080d2620180d2230180d2e40080d2020000d40040002f0078205e"}}, @msr={0x14, 0x20, {0x603000000013c529, 0x1d}}, @uexit={0x0, 0x18, 0x4}], 0x470}, &(0x7f0000000640)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r13, 0xae03, 0x7d)

30m9.252446532s ago: executing program 41 (id=97):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x10004, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0xfffffffffffffff7, 0x0})

20m51.951256166s ago: executing program 1 (id=98):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140000, &(0x7f0000000000)=0x8}) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c006, &(0x7f0000000040)})

20m39.601966103s ago: executing program 0 (id=99):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x1})

20m35.012210404s ago: executing program 1 (id=100):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000c2e000/0x2000)=nil, 0x930, 0x100000a, 0x110, r2, 0x40000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="b7fd70886788e8e0e522022a69832d0435b8dd45f22344477a3b4c9464506ced90a91e573a3ffae3de1fc5cd2dd6f1294366d73f78a3bf8c268782fc65b9a6b4f9aa43c1777b7837", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="b7fd70886788e8e0e522022a69832d0435b8dd45f22344477a3b4c9464506ced90a91e573a3ffae3de1fc5cd2dd6f1294366d73f78a3bf8c268782fc65b9a6b4f9aa43c1777b7837", 0x0, 0x48)
r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x749282, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000) (async)
r10 = ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000)
ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x8000})
syz_kvm_setup_cpu$arm64(r10, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000080)=0x2})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x5, 0x6000, 0x2, r14, 0x8}) (async)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x5, 0x6000, 0x2, r14, 0x8})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r14, 0x2})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r14, 0x6})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffff3e6, 0x3000, 0x1, r14, 0x6}) (async)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffff3e6, 0x3000, 0x1, r14, 0x6})
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async)
r15 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r16 = syz_kvm_vgic_v3_setup(r15, 0x2, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100000, &(0x7f0000000000)=0x300000000000})

20m22.350366976s ago: executing program 0 (id=101):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000002)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0xfffffffffffffffd, 0x1, 0x1}}, @hvc={0x32, 0x40, {0x5000000, [0x0, 0x2, 0x93, 0x4, 0x7]}}], 0x68}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0xfffffffffffffffd, 0x1, 0x1}}, @hvc={0x32, 0x40, {0x5000000, [0x0, 0x2, 0x93, 0x4, 0x7]}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x5, 0x100) (async)
syz_kvm_vgic_v3_setup(r1, 0x5, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6a541, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0xeeee7001, 0x2000, &(0x7f0000d5c000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0xeeee7001, 0x2000, &(0x7f0000d5c000/0x2000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x20)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a67000/0x400000)=nil) (async)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a67000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x80086601, 0x20000000)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0})
r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r14, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000100)={0x8})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) (async)
r15 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31)
ioctl$KVM_SET_DEVICE_ATTR_vm(r15, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0xd76, 0x2}}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r15, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0xd76, 0x2}})
ioctl$KVM_SIGNAL_MSI(r14, 0x4020aea5, &(0x7f0000000200)={0xdddd1000, 0x0, 0x80000000, 0x1, 0x7})

20m14.163564701s ago: executing program 1 (id=102):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0xc5ee})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r4, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000180)})
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece)
syz_kvm_vgic_v3_setup(r8, 0x4, 0x80)
close(r8)

20m1.062571644s ago: executing program 0 (id=103):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x10}, @memwrite={0x6e, 0x30, @generic={0x80a0000, 0xf6c, 0x2, 0x4}}, @hvc={0x32, 0x40, {0x8, [0x8, 0x9, 0x4, 0x9, 0x8000000000000000]}}, @irq_setup={0x46, 0x18, {0x3, 0x394}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x3, 0x7fffffff, 0xbf, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1bd}}, @svc={0x122, 0x40, {0x84000001, [0x6, 0x9, 0x8, 0xa6, 0xbcf]}}, @mrs={0xbe, 0x18, {0x603000000013f102}}, @smc={0x1e, 0x40, {0x84000003, [0x8, 0x0, 0x8000, 0x200, 0x3]}}, @hvc={0x32, 0x40, {0x80008000, [0x1, 0x6, 0x6, 0x5, 0x2]}}, @irq_setup={0x46, 0x18, {0x0, 0x2f2}}, @msr={0x14, 0x20, {0x603000000013deeb, 0x4}}, @irq_setup={0x46, 0x18, {0x2, 0x13a}}, @eret={0xe6, 0x18, 0x5}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x252}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0x0, 0x8, 0x0, 0x4}}, @code={0xa, 0x6c, {"0040a00d000080f80020004f40a491d200a0b0f2e10080d2220180d2c30180d2a40180d2020000d4001c004e0060df0c808391d200a0b8f2e10080d2a20080d2430180d2c40180d2020000d4000008d500c0600d000008d5"}}, @eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013e6dc, 0xffffffffffffffc0}}, @uexit={0x0, 0x18, 0x2}, @hvc={0x32, 0x40, {0x80008000, [0x3ff, 0x6b, 0x7fffffffffffffff, 0x4, 0x80]}}, @eret={0xe6, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x2, 0x27a}}, @eret={0xe6, 0x18, 0xfffffffffffffffb}], 0x3dc}, &(0x7f0000000440)=[@featur2={0x1, 0x7}], 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f0000000480)={0x0, 0x0, {[0x7, 0x6, 0x7, 0x7fffffff, 0x8, 0x7ff, 0xb441, 0x5, 0x9, 0x2726, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xffffffffffffa416, 0x5], [0xfffffffffffffff8, 0x9, 0x1ff, 0x8, 0xc67, 0x6, 0x7, 0x0, 0x3, 0x1, 0x4cfb, 0x6, 0x1, 0x1, 0x9, 0x9], [0x0, 0x214, 0x10000, 0x1, 0x8, 0x5, 0xa55, 0x7ff, 0x0, 0x2, 0x3, 0x0, 0xf2f0, 0x3, 0x9, 0x63], [0x100000001, 0x2, 0x3, 0xf2, 0x6, 0x0, 0xff, 0x3, 0x80, 0x4, 0x4, 0x81, 0x7, 0x7, 0xa]}})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000006c0)=@arm64={0x36, 0x9, 0x9, '\x00', 0x8001})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x3, 0x0, [{0x3, 0x5, 0x1, 0x0, @adapter={0xfffffffffffffffa, 0x8, 0x8, 0x9, 0x3}}, {0x9, 0x4, 0x0, 0x0, @sint={0x3ff, 0x2}}, {0x7, 0x3, 0x0, 0x0, @irqchip={0x4, 0x3}}]})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000007c0)={0x1, 0xdddd0000, 0x9, 0x0, 0x40})
ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000800))
close(r0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000840)={0x100000, 0xc000})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000880)={0x6, 0x0, [{0x1, 0x2, 0x0, 0x0, @adapter={0x2, 0x0, 0x0, 0x6aae, 0x5}}, {0xe, 0x4, 0x0, 0x0, @sint={0x8, 0x5}}, {0x1, 0x4, 0x1, 0x0, @adapter={0x2, 0x0, 0x8, 0xbfe8, 0x4}}, {0x0, 0x0, 0x1, 0x0, @msi={0x9, 0x3, 0x80, 0x9}}, {0x8, 0xbb945dabf76f7a7a, 0x0, 0x0, @irqchip={0xfffff800, 0x6}}, {0x7, 0x3, 0x1, 0x0, @sint={0x8, 0x3}}]})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000c40)={0x0, &(0x7f00000009c0)=[@mrs={0xbe, 0x18, {0x603000000013e6c3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x6, 0x100, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0x316}}, @msr={0x14, 0x20, {0x603000000013e532, 0xb8cf}}, @hvc={0x32, 0x40, {0xc4000053, [0x54, 0x401, 0x8, 0xe, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c03a}}, @uexit={0x0, 0x18, 0xffffffffffffff5e}, @code={0xa, 0x84, {"40b791d20040b8f2410180d2020080d2430180d2440180d2020000d4004c205e000028d5a0828dd200c0b8f2010180d2020080d2630080d2640080d2020000d4007008d5000028d5020000d40004200e008008d5a09195d20040b0f2410180d2420180d2030080d2640080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e721}}, @code={0xa, 0x54, {"007008d50094000f000028d5008008d5008008d500000033007008d500a4000d000c007cc0cf92d200c0b8f2410080d2620080d2030180d2440180d2020000d4"}}, @code={0xa, 0x84, {"0000204a007008d5007008d5000008d5008c205e0098202e009c000f20089ad20060b0f2e10080d2620080d2c30180d2a40180d2020000d400ec86d20020b0f2210180d2e20180d2830180d2040080d2020000d460a78ad200a0b8f2010080d2e20180d2e30180d2040180d2020000d4"}}], 0x25c}, &(0x7f0000000c80)=[@featur1={0x1, 0x58}], 0x1)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000b80000/0x400000)=nil, &(0x7f0000000ec0)=[{0x0, &(0x7f0000000cc0)=[@svc={0x122, 0x40, {0xc5000021, [0x8, 0x100000001, 0x8, 0x3, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013e720}}, @code={0xa, 0x84, {"000028d50004005e60b58dd20080b8f2e10080d2620180d2c30080d2840180d2020000d4008008d50078210e007008d50070800c40fc89d20040b0f2410080d2e20080d2c30080d2840180d2020000d460e487d200e0b8f2e10080d2820080d2230180d2e40080d2020000d4008008d5"}}, @code={0xa, 0xb4, {"00f8a02e0080600d20d688d20040b8f2810180d2e20180d2e30080d2640180d2020000d420af86d200c0b8f2e10080d2e20080d2a30180d2e40080d2020000d4a0fb9dd200c0b8f2410180d2420180d2a30180d2c40180d2020000d40050c01a008008d5003385d200a0b8f2210180d2220180d2630080d2c40080d2020000d460fd83d20060b0f2210180d2020180d2030080d2440080d2020000d40084000f"}}, @smc={0x1e, 0x40, {0x80, [0x0, 0x33ab, 0x46, 0x90, 0x24]}}, @mrs={0xbe, 0x18, {0x603000000013df51}}], 0x1e8}], 0x1, 0x0, &(0x7f0000000f00)=[@featur2={0x1, 0x56}], 0x1)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f0000000f40))
ioctl$KVM_SET_SREGS(r3, 0x4000ae84, &(0x7f0000000fc0)={{0x0, 0x100000, 0x4, 0x4, 0x4, 0x7f, 0x3, 0x3, 0x7f, 0x40, 0xa, 0x8}, {0x2, 0x4000, 0xe, 0x6, 0x9, 0x2, 0x4, 0x2, 0x4, 0x49, 0x4, 0xa}, {0x8000000, 0xffff4000, 0x7, 0x1, 0x4, 0x8, 0x8, 0x8, 0x10, 0x31, 0x48, 0x7}, {0x0, 0xffff1000, 0x4, 0x1e, 0x80, 0xff, 0x3, 0x7, 0x9, 0x10, 0x9, 0xb8}, {0xf000, 0x1, 0xf, 0xb, 0x54, 0x8, 0x2, 0x8, 0x8, 0x1, 0x2, 0x1}, {0xdddd0000, 0xeeef0000, 0x8, 0x0, 0xff, 0xd8, 0x5, 0x80, 0x9, 0x9, 0x32, 0x8}, {0xeeee8000, 0x2, 0xd, 0x8, 0x9, 0x7, 0x4, 0x2, 0x6, 0x8, 0x8, 0x40}, {0x8000000, 0x1000, 0x3, 0xc, 0x7e, 0x81, 0x40, 0xab, 0xf4, 0x6, 0x95, 0x4}, {0xdddd1000, 0x5}, {0xd000, 0xfd}, 0x4, 0x0, 0x0, 0x80, 0xa, 0x1100, 0xeeef0000, [0x910f, 0x3, 0x0, 0x7fffffff]})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
syz_kvm_setup_cpu$arm64(r4, r0, &(0x7f0000b89000/0x400000)=nil, &(0x7f0000001600)=[{0x0, &(0x7f0000001100)=[@hvc={0x32, 0x40, {0x32000000, [0x2, 0x6a3fce72, 0x8, 0x3, 0x80000000000000]}}, @eret={0xe6, 0x18, 0x7fffffffffffffff}, @code={0xa, 0x84, {"000008d5007008d5000800380000c0ad60688ad20080b8f2410080d2220080d2a30080d2440080d2020000d400000091a0209cd200e0b0f2810180d2020180d2c30080d2c40180d2020000d4007008d5009189d200a0b8f2a10180d2820180d2a30080d2240180d2020000d4007008d5"}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x6d}}, @mrs={0xbe, 0x18, {0x603000000013f200}}, @svc={0x122, 0x40, {0x83000001, [0x8, 0x9, 0x7, 0x4, 0x3]}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x372}}, @mrs={0xbe, 0x18, {0x603000000013c608}}, @eret={0xe6, 0x18, 0x6}, @code={0xa, 0xcc, {"a0b48bd20020b8f2e10080d2620080d2a30080d2840180d2020000d4a0b58ed20080b8f2010080d2c20180d2c30180d2440180d2020000d4000440f820c797d20040b0f2410080d2620080d2430180d2a40180d2020000d4000028d580849fd200c0b8f2c10180d2220080d2630180d2a40080d2020000d460bb90d200c0b8f2210080d2420080d2830080d2240180d2020000d40084000d207998d20080b0f2e10080d2820180d2630080d2c40180d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0x10, [0xffffffffffffffff, 0x8, 0x2, 0x8e9, 0x1]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x5e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xffd0}}, @svc={0x122, 0x40, {0x100, [0x400, 0xa07, 0x6, 0x3, 0xcc67]}}, @eret={0xe6, 0x18, 0x6b}, @smc={0x1e, 0x40, {0x84000011, [0xdf, 0x7, 0x7, 0x1, 0xffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x180, 0x0, 0x1}}, @hvc={0x32, 0x40, {0x84000014, [0x7, 0x62, 0x3, 0x3, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x3a0}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x51}}, @smc={0x1e, 0x40, {0x84000014, [0x3ff, 0x77, 0x7fffffffffffffff, 0x7, 0x95e]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0x7, 0xd4, 0x2, 0x4}}], 0x4e0}], 0x1, 0x0, &(0x7f0000001640)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000001680)={0xe4, 0x0, 0x6})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000001740)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000001700)={0x100, 0x9, 0x1}})
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000001780)={0x4, [0x6, 0x2, 0xd4, 0xc00000]})
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r5, 0x6, 0x810, r3, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000001a00)={0x0, &(0x7f00000017c0)=[@svc={0x122, 0x40, {0x4000000, [0x4, 0x9, 0x0, 0x2, 0x1]}}, @eret={0xe6, 0x18, 0x32dd}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013c01a, 0x2}}, @mrs={0xbe, 0x18, {0x6030000000138026}}, @msr={0x14, 0x20, {0x603000000013c4cf, 0x9}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013e518}}, @mrs={0xbe, 0x18, {0x603000000013defd}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x401}, @hvc={0x32, 0x40, {0x84000052, [0x5, 0x5, 0xfff, 0xa6b, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x65}}, @hvc={0x32, 0x40, {0xc4000007, [0x2, 0x5, 0x7, 0x800, 0x6b0]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x347}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x2a9}}], 0x238}, &(0x7f0000001a40)=[@featur2={0x1, 0x20}], 0x1)
ioctl$KVM_GET_SREGS(r6, 0x8000ae83, &(0x7f0000001a80))
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000001c00)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000001bc0)=0x7f})
ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000001c40)=0x8)
r7 = eventfd2(0x1ca00000, 0x1)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000001c80)={0xffffffffffffffff, 0x5, 0x1, r7})
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000001d00)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001cc0)={0x2, 0x3, 0x1}})

19m52.710363828s ago: executing program 1 (id=104):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000200)=@arm64_core={0x603000000010002a, &(0x7f0000000000)=0xc0})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x80000001, [0xfffffffffffffde5, 0x3ff, 0x1, 0x4, 0x9]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000300)={0x1000020, 0x1})

19m44.938582103s ago: executing program 0 (id=105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}], 0x80}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r11, 0x2, 0x12, r10, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r14, 0x3, 0x11, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0)
r15 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x0, 0x0)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x86000001, [0xc, 0x5, 0x2, 0xfffffffffffffffc, 0x52]}}], 0xffffffb5}, 0x0, 0x0)
ioctl$KVM_RUN(r17, 0xae80, 0x0)
syz_kvm_assert_reg(r4, 0x603000000013dce8, 0x8000)
openat$kvm(0x0, &(0x7f0000000240), 0x109000, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4})

19m29.783270366s ago: executing program 1 (id=106):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x1000000})
r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100006})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000280)={0x14, 0xff, 0x1}})
ioctl$KVM_ARM_PREFERRED_TARGET(r9, 0x8020aeaf, &(0x7f0000000000))
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

19m15.600820434s ago: executing program 0 (id=107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x100)
r5 = eventfd2(0x10000, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x83) (async)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0xb168, 0x0, r5}) (async)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
close(0x4) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2e)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13}) (async)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async)
close(0x5)

19m13.570403073s ago: executing program 1 (id=108):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (rerun: 32)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdf) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18m27.591417637s ago: executing program 42 (id=107):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x100)
r5 = eventfd2(0x10000, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x83) (async)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0xb168, 0x0, r5}) (async)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
close(0x4) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2e)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13}) (async)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async)
close(0x5)

18m18.821073067s ago: executing program 43 (id=108):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (rerun: 32)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xdf) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m41.56271865s ago: executing program 2 (id=148):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_GET_SREGS(r5, 0x8000ae83, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
r7 = eventfd2(0x1, 0x80001)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r7, 0x3})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m29.893418471s ago: executing program 3 (id=149):
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x7})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(0x0, 0xffffffffffffffff)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000500)={0x20700, 0x0, {[0x1, 0xf66d, 0x5, 0xffff, 0x6, 0x100000000, 0x8000, 0xa0000000, 0x0, 0x80, 0x7, 0xb97, 0x0, 0x3, 0x401, 0x8], [0x8000000000000001, 0x1c000, 0xfff, 0x413, 0xfff, 0x1, 0x7ff, 0x9, 0x1, 0x800, 0x100000000, 0x6, 0xffffffff80000001, 0xd, 0xa8b1, 0x9], [0x3, 0x0, 0x3, 0xfffffffffffffff9, 0x80000001, 0x26, 0x38b, 0x2, 0x0, 0x1, 0x7fffffff, 0x4b2123fe, 0x292e1739, 0xfffffffffffffffb, 0xe5, 0x2], [0x7, 0x36e8, 0x800, 0xb, 0x7, 0x200, 0xe, 0x3, 0x101, 0x23dd, 0x7fff, 0x473, 0x2d7, 0x9, 0x9]}})

2m18.102128107s ago: executing program 2 (id=150):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r4 = syz_kvm_vgic_v3_setup(r1, 0x3, 0x200)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0xc, 0x0}) (async, rerun: 64)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async, rerun: 64)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async, rerun: 32)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r6, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

2m10.918091149s ago: executing program 3 (id=151):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000240)=[{0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3b4}], 0x1, 0x0, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000fb0000/0x2000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0) (async)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0x0, 0x0) (async)
r11 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0x8000000, 0x8, r11})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff})
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})

2m0.432866865s ago: executing program 2 (id=152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, 0x0, 0x2000009, 0x11, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000001c0)=@other={0x8, 0x0})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2000001c)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f0000000640)=[@smc={0x1e, 0x40, {0xc4000012, [0x0, 0x4, 0x0, 0x4, 0x8001]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1m49.642014814s ago: executing program 3 (id=153):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x78)
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)
openat$kvm(0x0, &(0x7f0000000000), 0x30200, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x30200, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r7, 0xae03, 0x42)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0xb, <r8=>0xffffffffffffffff})
ioctl$KVM_CREATE_VM(r8, 0x400454e2, 0x110c210020) (async)
ioctl$KVM_CREATE_VM(r8, 0x400454e2, 0x110c210020)
r9 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) (async)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1})
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r14, 0x1, 0x100) (async)
syz_kvm_vgic_v3_setup(r14, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000100)={0x8})

1m39.281971203s ago: executing program 2 (id=154):
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0) (async)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r3, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0})
mmap$KVM_VCPU(&(0x7f0000008000/0x1000)=nil, r3, 0x7, 0x4010, r7, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xc4}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0) (async)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

1m31.363840161s ago: executing program 3 (id=155):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c038, &(0x7f0000000200)=0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb2)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xc6)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x8, 0x8, 0x2}}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xd4}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000400)={0x10002, 0x280, 0x40, &(0x7f0000000000)=[0x7fffffffffffffff, 0x18, 0x7ca, 0x8000000000000001, 0x5, 0x80000001, 0x4, 0x100000000, 0x3f5, 0x4c, 0x8001, 0x8000, 0xf, 0x100000001, 0x8, 0x6, 0x5, 0xb, 0x4, 0xc0000000, 0xfffffffffffffffc, 0x40, 0x4, 0x3c3b0baa, 0xf1, 0xed, 0x7, 0xb, 0x0, 0x40, 0x7ff, 0xa, 0x4, 0x1, 0x400, 0x401, 0xfffffffffffffff6, 0x3, 0x8, 0x0, 0x9, 0x4, 0x0, 0x72e3, 0x8, 0x100, 0x0, 0x8000000000000000, 0xfffffffffffffffd, 0x8, 0x5, 0x55, 0x4, 0x2, 0xb6ae, 0x9, 0x58e4, 0x0, 0x1c00000000000, 0xfffffffffffffffe, 0xfffffffffffffb80, 0x1, 0x9, 0xf, 0x1f, 0x0, 0xd09, 0x8, 0xa, 0x1, 0x5, 0x1, 0x6, 0xffffffff, 0x1, 0xd, 0xb0, 0x7, 0x8000000000000000, 0x8, 0x4, 0x9, 0x7, 0x3f96, 0x45b3, 0x4, 0xe5ff, 0x4, 0xd, 0x10, 0x4, 0x5, 0x80000001, 0x8000000000000000, 0x0, 0x8000000000000001, 0x7, 0x800, 0x3, 0xf, 0x6, 0x2, 0x0, 0x5, 0xfffffffffffffffb, 0x4, 0xe, 0x8, 0x0, 0x4, 0x80000000, 0x5, 0x8, 0x7, 0xaa, 0x6, 0x74c, 0x1ff, 0x8, 0x2, 0x0, 0x8, 0x3, 0x2, 0xfffffffffffffff8, 0x3, 0xde, 0xf48b]})

1m16.16795926s ago: executing program 2 (id=156):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0x3f, &(0x7f0000000040), 0x280880, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013df61}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m6.952055027s ago: executing program 3 (id=157):
r0 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x4, 0x10, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="6cd7f7ebb1f3cd43a979cb7ae055cfa04d2a9511164e0ef2", 0x0, 0x18)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000040)="94b31d62dac6284405b948c37d6d221ee0889b206ffb0d7b5af0d9bebbce0fbb471beabcda435271b32cc1996361b955f5943e506a936ae9fd4c637fb44079dcdf5f64db0ff61d1e", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000000c0)="d6f3e500e5ae2f4612fd8bd092809cb6b22a939f5a34b959", 0x0, 0x18)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0x3, 0x0, [{0x6, 0x4, 0x1, 0x0, @irqchip={0x7d0f, 0x1}}, {0x55000000, 0x5, 0x0, 0x0, @irqchip={0x0, 0xb}}, {0x3, 0x4, 0x1, 0x0, @adapter={0x7f1, 0x8, 0x5, 0x2, 0x8a26}}]})
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_REGS(r1, 0x4360ae82, &(0x7f00000001c0)={[0x1, 0xffffffffffffffc0, 0x85, 0xd, 0x2, 0x200, 0x7, 0x7f, 0x741a, 0x3, 0xf, 0x54, 0x8, 0xffffffff, 0xc0000000, 0x101], 0x2, 0x400})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r2, 0x8, 0x110, r1, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000280)="997ad56339eb2e0c34638f243adace68af9b6959a81f59c63f09b78b36e399540f63b900848a7ab5a89aff8b7cb889d19f9778306c6308c934662fb7e76630045ec2216e25775d81", 0x0, 0x48)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x50000, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xd8000, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r2, 0x4, 0x40010, r1, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r2, 0x2, 0x10, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101, 0x0)
close(r4)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f00000003c0)={0x9, 0x5})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000400)={0x17, 0x7})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000440)={0x7fff, 0x6})
ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000480)={{0xfeee3000, 0xeeee8000, 0xc, 0x1, 0x5, 0x2, 0x2, 0x6, 0x5, 0x1, 0x0, 0x7}, {0xf000, 0xe6efb000, 0x4, 0x8, 0x3, 0x1, 0xff, 0x80, 0x9, 0xb, 0x0, 0x1}, {0x4000, 0xffff1000, 0xf, 0x0, 0x7, 0x48, 0xb, 0x2, 0x2, 0x7, 0x5}, {0x1111d001, 0xdddd1000, 0xf, 0x2, 0x0, 0x80, 0x8, 0x4, 0x2, 0x3c, 0x16, 0x4}, {0x4, 0x0, 0xe, 0xa6, 0x1, 0xf6, 0x1, 0xc, 0x7, 0x9, 0xb, 0x5}, {0x4000, 0xdddd1000, 0x9, 0x9, 0x3, 0x6, 0x47, 0xf, 0x0, 0x6, 0xf9, 0x9}, {0xd000, 0x4000, 0xc, 0x7, 0xc, 0xd, 0x5, 0x6, 0xa8, 0x54, 0x6}, {0xdddd1000, 0x5000, 0x0, 0x1, 0xbd, 0x0, 0x10, 0x7, 0x1, 0x3, 0x1, 0xde}, {0xeeee0000, 0x8}, {0x0, 0xf8c}, 0x40000020, 0x0, 0x5000, 0x2, 0xb, 0x4100, 0x5000, [0xffffffffffffff74, 0x1, 0x4, 0x8000000000000001]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x40080, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4000ae84, &(0x7f0000000600)={{0x2000, 0x0, 0xb, 0x5, 0x5, 0x4, 0x5, 0x1, 0x3, 0xcd, 0x5, 0x7f}, {0x4000, 0x0, 0x9, 0x81, 0x7, 0x5, 0x7f, 0x6, 0xa8, 0x9, 0x5, 0x9}, {0x5000, 0x3000, 0xa, 0x40, 0x3, 0x4, 0x38, 0x3, 0xc9, 0x1, 0x4, 0xa}, {0xeeee8000, 0x0, 0xb, 0x9, 0x81, 0xc, 0x6, 0x7, 0x3, 0x0, 0x4, 0x1}, {0x10001, 0x0, 0xd, 0x3, 0x7, 0xf7, 0x8, 0x6, 0xfc, 0xd7, 0x2, 0x3}, {0x3000, 0xdddd1000, 0xa, 0xff, 0x3, 0x3, 0xa, 0x4, 0x5, 0x8, 0x5, 0x5}, {0xeeee8000, 0xeeee0000, 0xf, 0x8, 0xb4, 0x97, 0x4, 0xff, 0x4, 0x3, 0x0, 0xff}, {0x0, 0xdddd0000, 0xe, 0x5, 0x40, 0x1, 0xce, 0x4, 0x2, 0x9, 0x39, 0x5}, {0x5000, 0x7ff}, {0x80a0000, 0x5}, 0x9, 0x0, 0x2, 0x420053, 0x3, 0xe900, 0x4, [0xb46, 0x3, 0x0, 0xebc]})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000740)="cc8faa3ebb9081341264620ce5ddd32e0b6600bb9605504cf440bae6f723abd1873408a8e59bbd3721815cd00a9a3e246419fe21b799ac5ab78ff9b95d4698556bbda7df0b224044", 0x0, 0x48)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x12)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000800)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000007c0)=0x40})
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000840)={0xb6, 0x0, 0x1})
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000008c0)={0x7, 0x2})

55.455070455s ago: executing program 2 (id=158):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x801c581f, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1b75f3, 0x408) (async)
r9 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1b75f3, 0x408)
ioctl$KVM_CHECK_EXTENSION(r9, 0x541b, 0x20000000000000ac)

50.420290062s ago: executing program 3 (id=159):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r5, 0x2000003, 0x11, r3, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8)
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r5, 0x2000009, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x7, 0x80800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r9}) (async)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r9})
close(r8)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d9600020000000100000003000000000000000400000000000000320000000000000040000000000000005200008400"], 0x80}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d9600020000000100000003000000000000000400000000000000320000000000000040000000000000005200008400"], 0x80}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)

7.288182529s ago: executing program 44 (id=158):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x801c581f, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1b75f3, 0x408) (async)
r9 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1b75f3, 0x408)
ioctl$KVM_CHECK_EXTENSION(r9, 0x541b, 0x20000000000000ac)

0s ago: executing program 45 (id=159):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r5, 0x2000003, 0x11, r3, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8)
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r5, 0x2000009, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x7, 0x80800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r9}) (async)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r9})
close(r8)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d9600020000000100000003000000000000000400000000000000320000000000000040000000000000005200008400"], 0x80}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$arm64(r6, r10, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d9600020000000100000003000000000000000400000000000000320000000000000040000000000000005200008400"], 0x80}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)

kernel console output (not intermixed with test programs):

[  386.394995][ T3155] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.748416][ T3155] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:19750' (ED25519) to the list of known hosts.
[  601.491224][   T25] audit: type=1400 audit(600.670:60): avc:  denied  { name_bind } for  pid=3308 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  603.422305][   T25] audit: type=1400 audit(602.620:61): avc:  denied  { execute } for  pid=3309 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  603.456401][   T25] audit: type=1400 audit(602.660:62): avc:  denied  { execute_no_trans } for  pid=3309 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  624.724586][   T25] audit: type=1400 audit(623.920:63): avc:  denied  { mounton } for  pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  624.757209][   T25] audit: type=1400 audit(623.960:64): avc:  denied  { mount } for  pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  624.838883][ T3309] cgroup: Unknown subsys name 'net'
[  624.894836][   T25] audit: type=1400 audit(624.090:65): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  625.311544][ T3309] cgroup: Unknown subsys name 'cpuset'
[  625.417333][ T3309] cgroup: Unknown subsys name 'rlimit'
[  626.358094][   T25] audit: type=1400 audit(625.560:66): avc:  denied  { setattr } for  pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  626.377321][   T25] audit: type=1400 audit(625.580:67): avc:  denied  { mounton } for  pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  626.406800][   T25] audit: type=1400 audit(625.600:68): avc:  denied  { mount } for  pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  627.609146][ T3312] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  627.629684][   T25] audit: type=1400 audit(626.830:69): avc:  denied  { relabelto } for  pid=3312 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  627.657473][   T25] audit: type=1400 audit(626.860:70): avc:  denied  { write } for  pid=3312 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  627.844795][   T25] audit: type=1400 audit(627.040:71): avc:  denied  { read } for  pid=3309 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  627.859688][   T25] audit: type=1400 audit(627.060:72): avc:  denied  { open } for  pid=3309 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  627.909851][ T3309] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  679.088342][   T25] audit: type=1400 audit(678.290:73): avc:  denied  { execmem } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  683.809035][   T25] audit: type=1400 audit(683.010:74): avc:  denied  { read } for  pid=3315 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  683.854254][   T25] audit: type=1400 audit(683.040:75): avc:  denied  { open } for  pid=3315 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  683.923120][   T25] audit: type=1400 audit(683.110:76): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  684.165757][   T25] audit: type=1400 audit(683.360:77): avc:  denied  { module_request } for  pid=3316 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  684.189600][   T25] audit: type=1400 audit(683.380:78): avc:  denied  { module_request } for  pid=3315 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  685.303621][   T25] audit: type=1400 audit(684.500:79): avc:  denied  { sys_module } for  pid=3315 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  714.294254][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.599940][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.659064][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.969509][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.963876][ T3316] hsr_slave_0: entered promiscuous mode
[  727.007208][ T3316] hsr_slave_1: entered promiscuous mode
[  727.576701][ T3315] hsr_slave_0: entered promiscuous mode
[  727.599524][ T3315] hsr_slave_1: entered promiscuous mode
[  727.619385][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[  727.624495][ T3315] Cannot create hsr debugfs directory
[  737.252696][   T25] audit: type=1400 audit(736.450:80): avc:  denied  { create } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  737.318432][   T25] audit: type=1400 audit(736.520:81): avc:  denied  { write } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  737.394468][   T25] audit: type=1400 audit(736.540:82): avc:  denied  { read } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  737.579344][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.247464][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.477533][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  738.802872][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  740.398615][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  740.556549][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  740.705768][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  740.964138][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  753.613100][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.068734][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.769759][ T3316] veth0_vlan: entered promiscuous mode
[  813.194908][ T3316] veth1_vlan: entered promiscuous mode
[  814.737783][ T3315] veth0_vlan: entered promiscuous mode
[  815.533172][ T3315] veth1_vlan: entered promiscuous mode
[  815.659437][ T3316] veth0_macvtap: entered promiscuous mode
[  816.197032][ T3316] veth1_macvtap: entered promiscuous mode
[  818.375253][ T3315] veth0_macvtap: entered promiscuous mode
[  818.983791][ T3315] veth1_macvtap: entered promiscuous mode
[  819.557089][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.612360][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.626891][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.675268][ T3391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  823.117616][   T25] audit: type=1400 audit(822.310:83): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  823.383084][ T3393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.387071][ T3393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.419529][ T3393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.454910][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  823.478754][   T25] audit: type=1400 audit(822.560:84): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.QL3rH8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  823.702602][   T25] audit: type=1400 audit(822.890:85): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  824.172239][   T25] audit: type=1400 audit(823.370:86): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.QL3rH8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  824.389557][   T25] audit: type=1400 audit(823.590:87): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/syzkaller.QL3rH8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  825.625297][   T25] audit: type=1400 audit(824.820:88): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  825.963898][   T25] audit: type=1400 audit(825.150:89): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  826.083586][   T25] audit: type=1400 audit(825.280:90): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  826.578139][   T25] audit: type=1400 audit(825.780:91): avc:  denied  { mount } for  pid=3316 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  826.743045][   T25] audit: type=1400 audit(825.940:92): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  828.004281][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  829.682453][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  829.691700][   T25] audit: type=1400 audit(828.880:94): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  829.722276][   T25] audit: type=1400 audit(828.910:95): avc:  denied  { open } for  pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  829.754285][   T25] audit: type=1400 audit(828.930:96): avc:  denied  { ioctl } for  pid=3316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  840.499447][   T25] audit: type=1400 audit(839.700:97): avc:  denied  { read } for  pid=3473 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  840.572528][   T25] audit: type=1400 audit(839.770:98): avc:  denied  { open } for  pid=3473 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  840.639006][   T25] audit: type=1400 audit(839.840:99): avc:  denied  { ioctl } for  pid=3473 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  845.556445][   T25] audit: type=1400 audit(844.760:100): avc:  denied  { append } for  pid=3475 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  859.398844][   T25] audit: type=1400 audit(858.600:101): avc:  denied  { write } for  pid=3486 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  889.852364][   T25] audit: type=1400 audit(889.030:102): avc:  denied  { execute } for  pid=3507 comm="syz.1.12" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  922.833850][ T3530] debugfs: 'vgic-its-state@8080000' already exists in '3530-4'
[  955.354964][   T25] audit: type=1400 audit(954.520:103): avc:  denied  { map } for  pid=3547 comm="syz.1.23" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  995.843223][   T25] audit: type=1400 audit(995.020:104): avc:  denied  { setattr } for  pid=3564 comm="syz.1.29" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1176.813755][ T3611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1177.057271][ T3611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.854943][ T3618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1186.128137][ T3618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1206.109713][ T3611] hsr_slave_0: entered promiscuous mode
[ 1206.201759][ T3611] hsr_slave_1: entered promiscuous mode
[ 1206.253243][ T3611] debugfs: 'hsr0' already exists in 'hsr'
[ 1206.254196][ T3611] Cannot create hsr debugfs directory
[ 1215.286882][ T3618] hsr_slave_0: entered promiscuous mode
[ 1215.403434][ T3618] hsr_slave_1: entered promiscuous mode
[ 1215.439705][ T3618] debugfs: 'hsr0' already exists in 'hsr'
[ 1215.521854][ T3618] Cannot create hsr debugfs directory
[ 1223.711661][ T3611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1224.686015][ T3611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1225.246335][ T3611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1227.572858][ T3611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1229.075844][ T3425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1230.106330][ T3425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1230.737132][ T3425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1231.694666][ T3425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.272665][ T3618] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1251.378877][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1251.572929][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1251.676164][ T3425] bond0 (unregistering): Released all slaves
[ 1252.398203][ T3618] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1252.829907][ T3618] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1253.348872][ T3618] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1254.214979][ T3425] hsr_slave_0: left promiscuous mode
[ 1254.304455][ T3425] hsr_slave_1: left promiscuous mode
[ 1255.049318][ T3425] veth1_macvtap: left promiscuous mode
[ 1255.073791][ T3425] veth0_macvtap: left promiscuous mode
[ 1255.108930][ T3425] veth1_vlan: left promiscuous mode
[ 1255.122727][ T3425] veth0_vlan: left promiscuous mode
[ 1282.286977][ T3413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.607247][ T3413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.948525][ T3413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.007074][ T3413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.289034][ T3611] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1306.892720][ T3413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1307.277025][ T3413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1307.477318][ T3413] bond0 (unregistering): Released all slaves
[ 1309.146881][ T3413] hsr_slave_0: left promiscuous mode
[ 1309.289176][ T3413] hsr_slave_1: left promiscuous mode
[ 1309.917817][ T3413] veth1_macvtap: left promiscuous mode
[ 1309.944220][ T3413] veth0_macvtap: left promiscuous mode
[ 1309.955841][ T3413] veth1_vlan: left promiscuous mode
[ 1309.974323][ T3413] veth0_vlan: left promiscuous mode
[ 1332.898412][ T3618] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1407.044569][ T3611] veth0_vlan: entered promiscuous mode
[ 1407.874353][ T3611] veth1_vlan: entered promiscuous mode
[ 1410.574107][ T3611] veth0_macvtap: entered promiscuous mode
[ 1410.975842][ T3611] veth1_macvtap: entered promiscuous mode
[ 1413.791555][ T3698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.795926][ T3698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.863256][ T3333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.875353][ T3333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.266298][ T3618] veth0_vlan: entered promiscuous mode
[ 1429.422889][ T3618] veth1_vlan: entered promiscuous mode
[ 1432.876881][ T3618] veth0_macvtap: entered promiscuous mode
[ 1433.439794][ T3618] veth1_macvtap: entered promiscuous mode
[ 1436.867747][ T3689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.874511][ T3689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.898712][ T3689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.911589][ T3689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.155449][ T3700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.039953][ T3700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1634.699151][ T3700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.323666][ T3700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1656.356620][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1656.582802][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1656.747685][ T3700] bond0 (unregistering): Released all slaves
[ 1659.901784][ T3700] hsr_slave_0: left promiscuous mode
[ 1660.021555][ T3700] hsr_slave_1: left promiscuous mode
[ 1660.556729][ T3700] veth1_macvtap: left promiscuous mode
[ 1660.567310][ T3700] veth0_macvtap: left promiscuous mode
[ 1660.585843][ T3700] veth1_vlan: left promiscuous mode
[ 1660.602363][ T3700] veth0_vlan: left promiscuous mode
[ 1688.606933][ T3700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1690.032661][ T3700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1691.167080][ T3700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.958171][ T3700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1709.368355][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1709.594976][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1709.736741][ T3700] bond0 (unregistering): Released all slaves
[ 1712.058511][ T3700] hsr_slave_0: left promiscuous mode
[ 1712.339078][ T3700] hsr_slave_1: left promiscuous mode
[ 1713.013389][ T3700] veth1_macvtap: left promiscuous mode
[ 1713.016702][ T3700] veth0_macvtap: left promiscuous mode
[ 1713.038461][ T3700] veth1_vlan: left promiscuous mode
[ 1713.063654][ T3700] veth0_vlan: left promiscuous mode
[ 1731.054983][ T3890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1731.426750][ T3890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1749.745532][ T3908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1750.018778][ T3908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1756.899494][ T3890] hsr_slave_0: entered promiscuous mode
[ 1756.977315][ T3890] hsr_slave_1: entered promiscuous mode
[ 1771.548033][ T3890] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1771.928601][ T3890] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1772.313476][ T3890] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1772.599573][ T3890] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1776.764012][ T3908] hsr_slave_0: entered promiscuous mode
[ 1776.825973][ T3908] hsr_slave_1: entered promiscuous mode
[ 1776.888742][ T3908] debugfs: 'hsr0' already exists in 'hsr'
[ 1776.933189][ T3908] Cannot create hsr debugfs directory
[ 1795.487593][ T3908] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1796.009124][ T3908] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1796.558136][ T3908] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1797.053873][ T3908] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1805.486059][ T3890] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1827.254531][ T3908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1938.458676][ T3890] veth0_vlan: entered promiscuous mode
[ 1939.506116][ T3890] veth1_vlan: entered promiscuous mode
[ 1942.703960][ T3890] veth0_macvtap: entered promiscuous mode
[ 1943.136692][ T3890] veth1_macvtap: entered promiscuous mode
[ 1946.351968][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1946.367618][ T3698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1946.412545][ T3698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1946.500101][ T3698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1964.255346][ T3908] veth0_vlan: entered promiscuous mode
[ 1965.823805][ T3908] veth1_vlan: entered promiscuous mode
[ 1970.075102][ T3908] veth0_macvtap: entered promiscuous mode
[ 1970.962198][ T3908] veth1_macvtap: entered promiscuous mode
[ 1975.399890][ T3391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1975.413805][ T3391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1975.434405][ T3391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1975.444521][ T3391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2068.507443][   T25] audit: type=1400 audit(2067.700:105): avc:  denied  { map } for  pid=4209 comm="syz.5.68" path="pipe:[8149]" dev="pipefs" ino=8149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2203.407692][ T3393] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2205.516366][ T3393] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2207.404751][ T3393] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2209.347082][ T3393] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2237.102716][ T3393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2237.366335][ T3393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2237.453739][ T3393] bond0 (unregistering): Released all slaves
[ 2241.886561][ T3393] hsr_slave_0: left promiscuous mode
[ 2242.043696][ T3393] hsr_slave_1: left promiscuous mode
[ 2242.918048][ T3393] veth1_macvtap: left promiscuous mode
[ 2242.919458][ T3393] veth0_macvtap: left promiscuous mode
[ 2242.933917][ T3393] veth1_vlan: left promiscuous mode
[ 2242.982729][ T3393] veth0_vlan: left promiscuous mode
[ 2280.586968][ T3393] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2282.188914][ T3393] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2283.916535][ T3393] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2285.849017][ T3393] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2305.636924][ T3393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2305.767736][ T3393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2305.828529][ T3393] bond0 (unregistering): Released all slaves
[ 2309.322782][ T3393] hsr_slave_0: left promiscuous mode
[ 2309.653456][ T3393] hsr_slave_1: left promiscuous mode
[ 2310.285253][ T3393] veth1_macvtap: left promiscuous mode
[ 2310.342860][ T3393] veth0_macvtap: left promiscuous mode
[ 2310.345380][ T3393] veth1_vlan: left promiscuous mode
[ 2310.369141][ T3393] veth0_vlan: left promiscuous mode
[ 2351.616111][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2351.878695][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2358.592623][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2358.889195][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2381.412039][ T4270] hsr_slave_0: entered promiscuous mode
[ 2381.477348][ T4270] hsr_slave_1: entered promiscuous mode
[ 2391.768922][ T4276] hsr_slave_0: entered promiscuous mode
[ 2391.862279][ T4276] hsr_slave_1: entered promiscuous mode
[ 2391.914258][ T4276] debugfs: 'hsr0' already exists in 'hsr'
[ 2391.923726][ T4276] Cannot create hsr debugfs directory
[ 2409.432526][ T4270] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2410.311896][ T4270] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2411.007598][ T4270] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2411.444418][ T4270] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2417.344177][ T4276] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2417.669683][ T4276] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2418.213855][ T4276] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2418.744604][ T4276] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2445.217731][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2452.616379][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2605.553493][ T4270] veth0_vlan: entered promiscuous mode
[ 2606.525230][ T4270] veth1_vlan: entered promiscuous mode
[ 2610.106858][ T4270] veth0_macvtap: entered promiscuous mode
[ 2611.526798][ T4270] veth1_macvtap: entered promiscuous mode
[ 2613.562773][ T4276] veth0_vlan: entered promiscuous mode
[ 2615.669037][ T4276] veth1_vlan: entered promiscuous mode
[ 2617.526654][ T3700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2617.561399][ T3926] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2617.576351][ T3926] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2617.592455][ T3926] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2622.726231][ T4276] veth0_macvtap: entered promiscuous mode
[ 2624.086960][ T4276] veth1_macvtap: entered promiscuous mode
[ 2630.047309][ T3689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2630.053374][ T3689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2630.068469][ T3689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2630.217006][ T3689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2924.168470][ T3698] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2927.462856][ T3698] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2929.399209][ T3698] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2932.132860][ T3698] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2966.598715][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2967.407794][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2967.822850][ T3698] bond0 (unregistering): Released all slaves
[ 2970.662731][ T3698] hsr_slave_0: left promiscuous mode
[ 2970.809263][ T3698] hsr_slave_1: left promiscuous mode
[ 2971.443901][ T3698] veth1_macvtap: left promiscuous mode
[ 2971.472506][ T3698] veth0_macvtap: left promiscuous mode
[ 2971.496726][ T3698] veth1_vlan: left promiscuous mode
[ 2971.518801][ T3698] veth0_vlan: left promiscuous mode
[ 3007.348605][ T3698] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3008.897388][ T3698] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3011.038604][ T3698] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3012.957765][ T3698] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3039.833347][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3039.986767][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3040.068585][ T3698] bond0 (unregistering): Released all slaves
[ 3043.674510][ T3698] hsr_slave_0: left promiscuous mode
[ 3043.807394][ T3698] hsr_slave_1: left promiscuous mode
[ 3044.743161][ T3698] veth1_macvtap: left promiscuous mode
[ 3044.762437][ T3698] veth0_macvtap: left promiscuous mode
[ 3044.774264][ T3698] veth1_vlan: left promiscuous mode
[ 3044.798066][ T3698] veth0_vlan: left promiscuous mode
[ 3098.196118][ T4636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3099.035460][ T4636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3118.794300][ T4642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3120.063372][ T4642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3141.075156][ T4636] hsr_slave_0: entered promiscuous mode
[ 3141.116531][ T4636] hsr_slave_1: entered promiscuous mode
[ 3160.597578][ T4642] hsr_slave_0: entered promiscuous mode
[ 3160.728613][ T4642] hsr_slave_1: entered promiscuous mode
[ 3160.854399][ T4642] debugfs: 'hsr0' already exists in 'hsr'
[ 3160.884627][ T4642] Cannot create hsr debugfs directory
[ 3165.124705][ T4636] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3165.789507][ T4636] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3166.502990][ T4636] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3167.133421][ T4636] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3186.778621][ T4642] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3187.485783][ T4642] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3188.156368][ T4642] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3188.736730][ T4642] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3214.045741][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3230.086385][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3407.434762][ T4636] veth0_vlan: entered promiscuous mode
[ 3409.214522][ T4636] veth1_vlan: entered promiscuous mode
[ 3414.015688][ T4636] veth0_macvtap: entered promiscuous mode
[ 3415.106962][ T4636] veth1_macvtap: entered promiscuous mode
[ 3420.032882][ T3393] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3420.053864][ T3393] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3420.174748][ T3393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3420.201709][ T3393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3429.577517][ T4642] veth0_vlan: entered promiscuous mode
[ 3431.429807][ T4642] veth1_vlan: entered promiscuous mode
[ 3436.444799][ T4642] veth0_macvtap: entered promiscuous mode
[ 3437.578578][ T4642] veth1_macvtap: entered promiscuous mode
[ 3443.824639][ T3391] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3443.851827][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3443.892995][ T4279] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3443.919787][ T3393] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3562.878443][ T3425] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3566.159830][ T3425] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3569.467550][ T3425] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3572.318047][ T3425] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3611.321943][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3612.323807][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3612.694679][ T3425] bond0 (unregistering): Released all slaves
[ 3616.725181][ T3425] hsr_slave_0: left promiscuous mode
[ 3616.756398][ T3425] hsr_slave_1: left promiscuous mode
[ 3617.346323][ T3425] veth1_macvtap: left promiscuous mode
[ 3617.352437][ T3425] veth0_macvtap: left promiscuous mode
[ 3617.363318][ T3425] veth1_vlan: left promiscuous mode
[ 3617.384527][ T3425] veth0_vlan: left promiscuous mode
[ 3661.073698][ T3425] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3663.829009][ T3425] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3666.446277][ T3425] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3668.817701][ T3425] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3699.286366][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3699.466436][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3699.636440][ T3425] bond0 (unregistering): Released all slaves
[ 3703.287565][ T3425] hsr_slave_0: left promiscuous mode
[ 3703.408325][ T3425] hsr_slave_1: left promiscuous mode
[ 3703.978603][ T3425] veth1_macvtap: left promiscuous mode
[ 3704.068019][ T3425] veth0_macvtap: left promiscuous mode
[ 3704.083109][ T3425] veth1_vlan: left promiscuous mode
[ 3704.114170][ T3425] veth0_vlan: left promiscuous mode
[ 3757.016354][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3757.407531][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3766.687862][ T4915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3767.165996][ T4915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3800.776547][ T4906] hsr_slave_0: entered promiscuous mode
[ 3800.918603][ T4906] hsr_slave_1: entered promiscuous mode
[ 3814.824558][ T4915] hsr_slave_0: entered promiscuous mode
[ 3814.869376][ T4915] hsr_slave_1: entered promiscuous mode
[ 3815.074964][ T4915] debugfs: 'hsr0' already exists in 'hsr'
[ 3815.078289][ T4915] Cannot create hsr debugfs directory
[ 3845.492432][ T4906] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3848.213436][ T4906] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3851.208423][ T4906] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3852.016167][ T4906] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3865.556445][ T4915] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3866.205064][ T4915] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3866.763717][ T4915] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3867.289185][ T4915] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3893.346904][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3904.193376][ T4915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4042.214786][ T4906] veth0_vlan: entered promiscuous mode
[ 4043.448085][ T4906] veth1_vlan: entered promiscuous mode
[ 4047.825388][ T4906] veth0_macvtap: entered promiscuous mode
[ 4048.669262][ T4906] veth1_macvtap: entered promiscuous mode
[ 4054.273156][ T4915] veth0_vlan: entered promiscuous mode
[ 4055.272743][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4055.274236][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4055.312902][ T3698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4055.335658][ T4789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4057.198592][ T4915] veth1_vlan: entered promiscuous mode
[ 4063.600914][ T4915] veth0_macvtap: entered promiscuous mode
[ 4064.827744][ T4915] veth1_macvtap: entered promiscuous mode
[ 4069.275929][ T4789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4069.335153][ T3413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4069.493872][ T4647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4069.574370][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4240.238538][ T3333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4242.495266][ T3333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4244.914030][ T3333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4246.816264][ T3333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4281.982842][ T3333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4282.378034][ T3333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4282.774006][ T3333] bond0 (unregistering): Released all slaves
[ 4287.984766][ T3333] hsr_slave_0: left promiscuous mode
[ 4288.219206][ T3333] hsr_slave_1: left promiscuous mode
[ 4289.551863][ T3333] veth1_macvtap: left promiscuous mode
[ 4289.553213][ T3333] veth0_macvtap: left promiscuous mode
[ 4289.588820][ T3333] veth1_vlan: left promiscuous mode
[ 4289.633132][ T3333] veth0_vlan: left promiscuous mode
[ 4336.586714][ T3333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4338.754373][ T3333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4341.226730][ T3333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4343.292827][ T3333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4367.594228][ T3333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4367.824387][ T3333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4367.985608][ T3333] bond0 (unregistering): Released all slaves
[ 4371.823599][ T3333] hsr_slave_0: left promiscuous mode
[ 4371.899356][ T3333] hsr_slave_1: left promiscuous mode
[ 4372.720816][ T3333] veth1_macvtap: left promiscuous mode
[ 4372.803213][ T3333] veth0_macvtap: left promiscuous mode
[ 4372.818982][ T3333] veth1_vlan: left promiscuous mode
[ 4372.843379][ T3333] veth0_vlan: left promiscuous mode
[ 4460.479851][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4461.884337][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4464.363678][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4464.855421][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4499.613237][ T5232] hsr_slave_0: entered promiscuous mode
[ 4499.709762][ T5232] hsr_slave_1: entered promiscuous mode
[ 4504.098192][ T5227] hsr_slave_0: entered promiscuous mode
[ 4504.185321][ T5227] hsr_slave_1: entered promiscuous mode
[ 4504.264168][ T5227] debugfs: 'hsr0' already exists in 'hsr'
[ 4504.281624][ T5227] Cannot create hsr debugfs directory
[ 4541.497115][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 4542.387649][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 4542.853060][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 4543.884837][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 4548.874436][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 4549.329235][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 4549.869980][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 4550.353261][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 4583.627062][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4589.721345][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4719.407778][ T5232] veth0_vlan: entered promiscuous mode
[ 4720.445201][ T5232] veth1_vlan: entered promiscuous mode
[ 4724.347101][ T5232] veth0_macvtap: entered promiscuous mode
[ 4725.484118][ T5232] veth1_macvtap: entered promiscuous mode
[ 4726.954082][ T5227] veth0_vlan: entered promiscuous mode
[ 4729.035563][ T5227] veth1_vlan: entered promiscuous mode
[ 4731.585749][ T4652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4731.718639][ T4652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4731.729057][ T4652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4731.746424][ T4652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4736.306363][ T5227] veth0_macvtap: entered promiscuous mode
[ 4737.757845][ T5227] veth1_macvtap: entered promiscuous mode
[ 4743.084526][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4743.216263][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4743.236343][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4743.473265][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5479.726071][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5480.268017][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5488.292631][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5488.838457][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5538.205515][ T5766] hsr_slave_0: entered promiscuous mode
[ 5538.337507][ T5766] hsr_slave_1: entered promiscuous mode
[ 5538.497783][ T5766] debugfs: 'hsr0' already exists in 'hsr'
[ 5538.553371][ T5766] Cannot create hsr debugfs directory
[ 5546.677577][ T5768] hsr_slave_0: entered promiscuous mode
[ 5546.859278][ T5768] hsr_slave_1: entered promiscuous mode
[ 5546.973527][ T5768] debugfs: 'hsr0' already exists in 'hsr'
[ 5546.985290][ T5768] Cannot create hsr debugfs directory
[ 5595.361864][ T5766] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 5596.662895][ T5766] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 5600.077338][ T5766] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5601.009465][ T5766] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5620.066266][ T5768] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 5620.848953][ T5768] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 5621.676736][ T5768] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 5622.358513][ T5768] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 5655.594206][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5670.974378][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5723.521781][   T27] INFO: task syz.3.159:5744 blocked for more than 430 seconds.
[ 5723.522954][   T27]       Not tainted syzkaller #0
[ 5723.574808][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 5723.586311][   T27] task:syz.3.159       state:D stack:0     pid:5744  tgid:5744  ppid:5232   task_flags:0x400040 flags:0x00000019
[ 5723.588016][   T27] Call trace:
[ 5723.588509][   T27]  __switch_to+0x584/0xb20 (T)
[ 5723.732022][   T27]  __schedule+0x1eec/0x33a4
[ 5723.737185][   T27]  schedule+0xac/0x27c
[ 5723.737810][   T27]  schedule_timeout+0x5c/0x1e4
[ 5723.738294][   T27]  do_wait_for_common+0x28c/0x444
[ 5723.738685][   T27]  wait_for_completion+0x44/0x5c
[ 5723.739191][   T27]  __synchronize_srcu+0x2a4/0x320
[ 5723.739684][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 5723.785286][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 5723.785884][   T27]  kvm_put_kvm+0x6a0/0xfa8
[ 5723.786329][   T27]  kvm_vm_release+0x58/0x78
[ 5723.786765][   T27]  __fput+0x4ac/0x980
[ 5723.787182][   T27]  ____fput+0x20/0x58
[ 5723.787588][   T27]  task_work_run+0x1bc/0x254
[ 5723.788044][   T27]  do_notify_resume+0x1bc/0x270
[ 5723.788490][   T27]  el0_svc+0xb8/0x164
[ 5723.788930][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 5723.789366][   T27]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 5723.922935][   T27] 
[ 5723.922935][   T27] Showing all locks held in the system:
[ 5723.928438][   T27] 1 lock held by khungtaskd/27:
[ 5723.928950][   T27]  #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 5723.977657][   T27] 2 locks held by kworker/u4:4/49:
[ 5723.978072][   T27]  #0: 45f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 5723.979797][   T27]  #1: ffff80008cb07c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 5724.073392][   T27] 2 locks held by getty/3183:
[ 5724.073747][   T27]  #0: 34f0000011d0e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 5724.075353][   T27]  #1: 7bff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 5724.077039][   T27] 2 locks held by syz-executor/3309:
[ 5724.077360][   T27] 2 locks held by kworker/u4:1/3333:
[ 5724.077646][   T27]  #0: 45f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 5724.079272][   T27]  #1: ffff80008fd67c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 5724.305178][   T27] 3 locks held by kworker/u4:6/3393:
[ 5724.305526][   T27] 3 locks held by kworker/u4:7/3413:
[ 5724.305852][   T27] 3 locks held by kworker/u4:14/4652:
[ 5724.306179][   T27] 3 locks held by kworker/u4:15/4789:
[ 5724.306493][   T27] 3 locks held by kworker/u4:2/5098:
[ 5724.306780][   T27] 2 locks held by kworker/0:3/5134:
[ 5724.307164][   T27] 2 locks held by kworker/u4:0/5614:
[ 5724.307475][   T27] 2 locks held by syz.2.158/5741:
[ 5724.307825][   T27] 3 locks held by kworker/u4:8/5775:
[ 5724.308196][   T27] 4 locks held by dhcpcd-run-hook/5924:
[ 5724.308496][   T27] 1 lock held by modprobe/5925:
[ 5724.308781][   T27] 2 locks held by modprobe/5926:
[ 5724.309294][   T27] 
[ 5724.309550][   T27] =============================================
[ 5724.309550][   T27] 

VM DIAGNOSIS:
20:56:07  Registers:
info registers vcpu 0

CPU#0
 PC=ffff800080453b58 X00=0000000000000001 X01=0000000000000031
X02=0000000000000008 X03=0000000000000000 X04=0000000000000001
X05=0000000000000001 X06=0000000000000000 X07=ffff800081b48b1c
X08=71f000000d9b9d88 X09=0000000000000071 X10=0000000000ff0100
X11=ffff800087fe5a20 X12=0ffff800087932b9 X13=0000000000000001
X14=00000000ffff8000 X15=ffff800080007708 X16=ffff800080010e20
X17=000000000000009f X18=00000000000000ff X19=0000000000000003
X20=ffff8000800076a0 X21=0000000000000000 X22=00000000f6e6ac0c
X23=0000000000000000 X24=fff0000071e060c0 X25=0000000000000070
X26=88f000000d9c4000 X27=0000000000000220 X28=0000000000000000
X29=ffff800080007640 X30=ffff800081b48e30  SP=ffff8000800075f0
PSTATE=804020c9 N--- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=2525252525252525:2525252525252525 Z01=65642f000a732520:7325207334362e25
Z02=742065726f6d2072:6f662064656b636f Z03=000000ff0000ff00:00ff0000000000ff
Z04=0000000000000000:000f00f00f00000f Z05=64656b636f6c6220:343437353a393531
Z06=203a29315f657661:6c735f646e6f6220 Z07=206e612073612067:6e6976616c736e45
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000fffff84c2a40:0000fffff84c2a40 Z17=ffffff80ffffffd0:0000fffff84c2a10
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000