last executing test programs:

1h0m45.379075352s ago: executing program 0 (id=582):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000dd2000/0x1000)=nil, 0x930, 0x280000e, 0x10, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x894c, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x894c, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0xb702, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0xb702, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000000)=0xffffffffffffffff)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) (async)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) (async)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0)

1h0m18.022871791s ago: executing program 1 (id=583):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 64)
r10 = eventfd2(0x8, 0x80800) (rerun: 64)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r10, 0x2}) (async)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r10, 0x6}) (async)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000040)=@riscv64_d={0x8030000006000013, &(0x7f0000000000)=0x5})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x8, 0x8000000000000001, 0xffffffffffffffff}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) (async, rerun: 32)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x22)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
close(0xffffffffffffffff) (async)
close(0x4)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)

1h0m17.673183055s ago: executing program 0 (id=584):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xa00000001, 0x320)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bc2000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f00000000c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2b)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r14, 0x3, 0x40b2811, r13, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4})

1h0m4.801978059s ago: executing program 1 (id=585):
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fca000/0x2000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4000ae8d, &(0x7f0000000340)={0x5, 0x8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r7, 0x0)

1h0m2.070681887s ago: executing program 0 (id=586):
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x801c581f, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc2000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) (async)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18) (async)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000200))
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)

59m56.043228941s ago: executing program 1 (id=587):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r1, 0x5761, 0x2000001c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x8, 0x4, &(0x7f0000000140)=0x3})
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x4000000000009)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0xe0a7})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x100)
close(r6)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x340)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x7})
r9 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x0, 0x6000, 0x0, r9})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000000)={0x6000, 0x0, 0x0, 0x1, 0x20000000})
mmap$KVM_VCPU(&(0x7f0000ff1000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x41e4c3, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x400000000000000)
r12 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r12})
close(r11)

59m49.239016088s ago: executing program 0 (id=588):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x40200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ab8000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x0, 0x48})
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x10})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001})

59m40.378636736s ago: executing program 1 (id=589):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x2, 0x20000013)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffffffb, 0x6, &(0x7f0000000040)=0x5})

59m35.598184984s ago: executing program 1 (id=590):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r0, 0x400000f, 0x110, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffd)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

59m34.411405346s ago: executing program 0 (id=591):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0xfffff001})
r2 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bfd000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0xc, 0x6, 0x8, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c00b}}, @uexit={0x0, 0x18, 0xfffffffffffffff9}, @hvc={0x32, 0x40, {0x86000001, [0xfe8, 0x0, 0x100000001, 0x6, 0x2]}}, @irq_setup={0x46, 0x18, {0x2, 0x184}}, @svc={0x122, 0x40, {0x41000027, [0x0, 0x8001, 0x3, 0x400, 0x9]}}], 0xf0}, &(0x7f0000000200)=[@featur2={0x1, 0xaa}], 0x1)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000440)=[{0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @generic={0xa000, 0x4ed, 0x1, 0x9}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x3ac}}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013c03a}}, @code={0xa, 0x54, {"1f0000f2007008d5007008d5e003202a00fc002fe0c59ad20080b8f2c10180d2e20080d2630180d2040080d2020000d40088201e0000407a008008d5000000fc"}}, @hvc={0x32, 0x40, {0x800, [0x5, 0x8, 0x7, 0x1, 0x9a90]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0xb, 0xa1, 0xdcf7, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e6cf}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xa2d}}, @code={0xa, 0x54, {"007008d5000008d520b296d20080b0f2810080d2220180d2e30180d2240180d2020000d4007008d50000399e008008d5007008d5007008d50008a0b8007008d5"}}, @msr={0x14, 0x20, {0x603000000013c031, 0xffffffffffffffff}}], 0x200}], 0x1, 0x0, &(0x7f0000000480), 0x1)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000540)=[{0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x16ca, 0xea0}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x10, 0xfffffffc, 0x5729}}, @msr={0x14, 0x20, {0x603000000013f089, 0x264c}}], 0x68}], 0x1, 0x0, &(0x7f0000000580)=[@featur1={0x1, 0x4f}], 0x1)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000600)=@arm64_sve={0x608000000015003a, &(0x7f00000005c0)=0x3ff})
mmap$KVM_VCPU(&(0x7f0000ee2000/0x1000)=nil, 0x0, 0x0, 0x8010, r3, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000ced000/0x2000)=nil})
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000c40)={0x0, &(0x7f0000000680)=[@code={0xa, 0x54, {"0040202e0034000f0040202e60ce83d20040b0f2410080d2c20180d2630180d2040080d2020000d4007008d50004809a007008d50014005f000008d500a49f0d"}}, @eret={0xe6, 0x18, 0x59}, @smc={0x1e, 0x40, {0x84000002, [0xc43, 0x120000000000, 0x9, 0x2, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xe20, 0xfffffffffffffffd, 0x1}}, @uexit={0x0, 0x18}, @msr={0x14, 0x20, {0x603000000013c65b, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0x5, 0x4, 0x8}}, @eret={0xe6, 0x18, 0x2}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x6c, {"000080a80000002e00b8217e809382d200e0b0f2a10080d2a20180d2c30080d2840080d2020000d40008c09a0000219e008899d20020b0f2210180d2c20080d2e30080d2a40180d2020000d4007008d5008008d5008008d5"}}, @svc={0x122, 0x40, {0x4000000, [0x3ff, 0x9, 0x47b9, 0x3ff, 0x3]}}, @svc={0x122, 0x40, {0xc5000021, [0x7b55, 0x2, 0x1000, 0xabe9, 0x480000000000000]}}, @svc={0x122, 0x40, {0x80008000, [0x2, 0xffffffff, 0x100, 0x4372, 0x8]}}, @code={0xa, 0xcc, {"000040ad009c004f80ae81d20080b0f2c10180d2420180d2030080d2e40180d2020000d400d0000f0080206e80158ed200a0b8f2810080d2220180d2a30180d2e40080d2020000d4a0b48cd200a0b8f2210080d2a20180d2830180d2040180d2020000d4209e83d200c0b0f2410080d2620080d2230180d2e40080d2020000d460f99dd200e0b8f2010080d2820080d2230180d2040080d2020000d4e0ba80d20060b8f2810180d2e20180d2a30080d2840180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x4, 0xc6f1, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0xa, 0x0, 0xa, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x3, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x6}}, @code={0xa, 0xb4, {"000080f2406f91d200a0b8f2410180d2e20180d2430080d2440080d2020000d4008008d5200291d20080b0f2010180d2420180d2430180d2c40180d2020000d4000028d5203d8cd200c0b0f2a10080d2220180d2e30080d2e40180d2020000d4004d87d200a0b8f2410180d2420080d2c30080d2640080d2020000d4a00189d200a0b0f2610180d2420180d2630080d2c40180d2020000d400b8310e0034202e"}}, @msr={0x14, 0x20, {0x603000000013df11, 0xfffffffffffffffb}}, @code={0xa, 0xcc, {"a01b92d200e0b0f2e10080d2420080d2230080d2440080d2020000d4602082d200c0b0f2a10180d2820080d2430180d2040180d2020000d4c0ac91d200a0b0f2410180d2620180d2230080d2e40180d2020000d4000028d5a02a91d200e0b0f2010080d2620180d2630080d2e40080d2020000d4208d80d20080b8f2210080d2e20180d2e30080d2640180d2020000d4007008d5005d87d200c0b0f2c10080d2e20180d2830080d2640180d2020000d40004803c0000402d"}}], 0x5b4}, &(0x7f0000000c80)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000001180)={0x0, &(0x7f0000000cc0)=[@eret={0xe6, 0x18, 0x7fff}, @msr={0x14, 0x20, {0x603000000013c510, 0xffffffffffffffff}}, @svc={0x122, 0x40, {0x84000006, [0x9, 0x1e9, 0x3, 0x5, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x70, 0x0, 0x2}}, @memwrite={0x6e, 0x30, @generic={0xeeee0000, 0x9a7}}, @hvc={0x32, 0x40, {0x32000000, [0x8001, 0x8, 0x4, 0x1]}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0xeda, 0xc711, 0x8}}, @hvc={0x32, 0x40, {0x8400000f, [0x2, 0x10, 0x4, 0x4e42, 0x6]}}, @smc={0x1e, 0x40, {0xc400000d, [0x6, 0x8, 0x7, 0x7fffffffffffffff, 0x3]}}, @hvc={0x32, 0x40, {0x100002c, [0x8000000000000001, 0x783c, 0x7, 0x10000, 0x9]}}, @code={0xa, 0x84, {"00f8a12e0000000d60d89ad20060b0f2610180d2a20180d2830080d2040080d2020000d40000400c007008d50000000e007008d5609693d20040b8f2010080d2a20080d2e30080d2840080d2020000d4e0dc9cd20000b0f2610180d2620080d2830080d2a40180d2020000d4007008d5"}}, @code={0xa, 0xb4, {"00ec202e0038212e0000c039008008d50000c029e06096d200e0b0f2810080d2c20180d2230180d2240080d2020000d4802f8dd200a0b8f2e10080d2020080d2c30180d2c40080d2020000d4a0f096d200c0b8f2010080d2a20080d2830180d2240180d2020000d460ac94d20060b0f2a10180d2620180d2c30180d2440080d2020000d4c03c8ed200a0b0f2610180d2e20180d2e30080d2e40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x5, 0x5}}, @svc={0x122, 0x40, {0x84000007, [0x75, 0x80000001, 0x10, 0x4, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x10, 0x0, 0x8}}, @irq_setup={0x46, 0x18, {0x1, 0x13c}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0xec}}, @svc={0x122, 0x40, {0x8400000c, [0x0, 0x7, 0x2, 0x8, 0x7]}}, @hvc={0x32, 0x40, {0x4, [0x8, 0xcd, 0x3, 0x200, 0x7904]}}], 0x498}, &(0x7f00000011c0)=[@featur1={0x1, 0xe5}], 0x1)
r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000001880)={0x0, &(0x7f0000001200)=[@svc={0x122, 0x40, {0x32000000, [0xb, 0xff, 0xc, 0xc5, 0x8]}}, @irq_setup={0x46, 0x18, {0x2, 0xd}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x4, 0x1, 0x7}}, @code={0xa, 0x84, {"0040e21e0084c00de0e296d20000b8f2410080d2020180d2c30180d2040180d2020000d400a0000fc01f95d20080b8f2a10080d2620080d2c30180d2a40080d2020000d4000008d5006c200e605997d20020b8f2a10180d2e20080d2630180d2440080d2020000d4008008d5007008d5"}}, @memwrite={0x6e, 0x30, @generic={0x6000, 0x667, 0xb09f, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x1, 0xf, 0x8, 0x10001, 0x3}}, @smc={0x1e, 0x40, {0x4008003, [0x383, 0x1, 0x2, 0xffffffffffff7fff, 0x1]}}, @code={0xa, 0x84, {"0054200e000008d5000028d5a0089ed20020b0f2c10080d2c20180d2a30080d2440080d2020000d40088210e008008d5c00d85d20080b8f2210180d2e20080d2e30180d2a40080d2020000d4000028d50080804880798ed20060b0f2a10080d2a20080d2c30080d2c40180d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0x1fc, 0x401, 0x8}}, @irq_setup={0x46, 0x18, {0x2, 0x368}}, @mrs={0xbe, 0x18, {0x603000000013e18c}}, @irq_setup={0x46, 0x18, {0x3, 0x61}}, @hvc={0x32, 0x40, {0xc4000011, [0x8, 0x2, 0x7e, 0x4, 0x6e79]}}, @irq_setup={0x46, 0x18, {0x4, 0x2b0}}, @smc={0x1e, 0x40, {0x84000013, [0x7, 0x5, 0x10001, 0x2, 0x200]}}, @code={0xa, 0x9c, {"20af86d20000b8f2210080d2e20080d2a30080d2440180d2020000d40000004b000c40bc60439bd20020b8f2610080d2620080d2430180d2040180d2020000d4a0fe9cd20020b0f2e10180d2820180d2430180d2e40080d2020000d400a897d200e0b8f2410180d2c20180d2630180d2840080d2020000d4007008d50004c03c006c202e007008d5"}}, @svc={0x122, 0x40, {0x8400000f, [0x604aa48e, 0x6, 0x0, 0x80]}}, @code={0xa, 0xb4, {"60e48dd200e0b8f2c10180d2a20180d2e30180d2240080d2020000d4007008d5000028d5c0168ad200e0b8f2210180d2020180d2a30080d2c40180d2020000d4000020d4000028d5000028d5a0bd95d20000b8f2c10180d2e20180d2630080d2240180d2020000d4005892d200a0b0f2210080d2c20080d2230180d2840080d2020000d4608992d200e0b0f2210080d2e20080d2c30180d2640080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013807c}}, @code={0xa, 0x84, {"007008d50020202e001c005300d8215e00259ed20040b8f2a10180d2a20180d2030080d2240080d2020000d480368bd20040b8f2c10080d2c20180d2c30080d2040080d2020000d400d4a07ea03685d20080b8f2610080d2e20180d2e30180d2840180d2020000d4003c207e007008d5"}}, @mrs={0xbe, 0x18, {0x603000000013e21b}}, @eret={0xe6, 0x18, 0xf}, @svc={0x122, 0x40, {0xc5000020, [0x5, 0x76c4, 0x6, 0x3, 0x5]}}, @hvc={0x32, 0x40, {0xc4000004, [0x0, 0x5a, 0x7fffffff, 0x8, 0x2]}}, @eret={0xe6, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013c2a9, 0x9}}], 0x644}, &(0x7f00000018c0)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000001900)={0xab, "e890c189852e5aaab26266374a1ff2b0ba7ab0aa958c05f0983a96a4d24d47c3880aa748f6233226c1666207fe1a49f90451871f46c173a6710682bff92911538682f38d4a637c021d83b2df14a79776d98866820b10be2fb00005eb92f499b276759147f7521894638729facc18f2dc8aae442a950e6cf5fb3f5ae1b16dac6f9db56fb31eaf17541ae6115ec7f5d3caaf90546f4941d1714cc4c89346b063820e02bc898fe2cb602059a4"})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f00000019c0)={0x0, 0xd000})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000001a40)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000001a00)=0x1d})
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r7, 0x4068aea3, &(0x7f0000001a80)={0xdf, 0x0, 0x15000})
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000001b40)=@attr_other={0x0, 0x5, 0xe, &(0x7f0000001b00)=0x3})
r8 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
r9 = eventfd2(0x7ff, 0x0)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000001b80)={r9, 0x4d31, 0x1, r8})
r10 = ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
close(r10)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000002000)={0x0, &(0x7f0000001bc0)=[@mrs={0xbe, 0x18, {0x603000000013f290}}, @hvc={0x32, 0x40, {0x80000000, [0x4cb, 0x6, 0xa, 0x3, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013ff10}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x0, 0x5, 0x200000, 0x1}}, @smc={0x1e, 0x40, {0x84000006, [0x1, 0x3, 0x82d5, 0x1, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x3, 0x2, 0x9, 0x0, 0x2}}, @smc={0x1e, 0x40, {0x4000, [0x3, 0xa, 0x0, 0x100]}}, @eret={0xe6, 0x18, 0xed8}, @hvc={0x32, 0x40, {0x80, [0x7f, 0xa, 0x6, 0x1, 0x4]}}, @msr={0x14, 0x20, {0x603000000013e518, 0xe654}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0xb6}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0xb, 0x2, 0x9}}, @hvc={0x32, 0x40, {0x24ff1b722d3f9916, [0x4, 0x2, 0x8000000000000000, 0x4, 0xea]}}, @memwrite={0x6e, 0x30, @generic={0x200000, 0x2e2, 0x6ab}}, @eret={0xe6, 0x18, 0xffff}, @hvc={0x32, 0x40, {0xc4000001, [0x2d2, 0x7, 0x9, 0x3, 0x20000000]}}, @eret={0xe6, 0x18, 0xb6c8}, @msr={0x14, 0x20, {0x603000000013dea4, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc00, 0x100000000, 0x9}}, @code={0xa, 0x54, {"0000600d1820601e007008d5007008d500088ed20020b8f2810180d2220080d2030080d2040080d2020000d400b0200e000028d5000028d500d8a00e008008d5"}}, @irq_setup={0x46, 0x18, {0x1, 0x47}}, @eret={0xe6, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x31f}}, @irq_setup={0x46, 0x18, {0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0xb, 0xffffffb3, 0x8000, 0x1}}], 0x424}, &(0x7f0000002040)=[@featur2={0x1, 0xa}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

59m29.721024747s ago: executing program 1 (id=592):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000b9c000/0x1000)=nil, 0x0, 0x5, 0x10, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f000054f000/0x4000)=nil, r5, 0xa, 0x12, r4, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r6, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x110000, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xd)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bc5000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x0, {0x84000052, [0x7ff, 0x6, 0x4, 0x7, 0x6]}}, @uexit={0x0, 0x0, 0x6}, @smc={0x1e, 0x0, {0xc4000003, [0x4, 0x9, 0x4, 0xffff, 0x624]}}, @hvc={0x32, 0x0, {0xc5000021, [0x6, 0x7ff, 0x101, 0xb, 0xffc0000000000000]}}, @memwrite={0x6e, 0x0, @generic={0x1, 0xfff, 0x4}}, @its_send_cmd={0xaa, 0x0, {0x4, 0x1, 0x2, 0x6, 0x3, 0xffffffff, 0x1}}, @uexit={0x0, 0x0, 0x2}, @msr={0x14, 0x0, {0x603000000013e681, 0x3}}, @code={0xa, 0x0, {"0054007f007008d50028217e007008d500d0005f007008d5c0968fd200e0b0f2a10180d2a20180d2430080d2840180d2020000d4a0b99ad200a0b8f2810080d2e20080d2230080d2e40080d2020000d40000805200849f0d"}}, @msr={0x14, 0x0, {0x603000000013e66e, 0xdf2}}, @its_send_cmd={0xaa, 0x0, {0x1, 0x0, 0x0, 0xa, 0x8001, 0x6, 0x4}}, @uexit, @uexit={0x0, 0x0, 0x400}, @smc={0x1e, 0x0, {0xc4000004, [0xaf, 0xfffffffffffffffb, 0x96a8, 0x9, 0x8]}}, @uexit={0x0, 0x0, 0x2}, @irq_setup={0x46, 0x0, {0x1, 0x10}}], 0xffffffffffffff56}, &(0x7f0000000300)=[@featur2={0x1, 0x90}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100016)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)

59m28.731573695s ago: executing program 0 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xb}, @code={0xa, 0x9c, {"205f93d20020b8f2e10180d2e20080d2e30080d2a40180d2020000d4007008d5007008d5007008d560b584d200a0b0f2410180d2a20180d2e30080d2640180d2020000d40050200e0004601e007008d580d58bd200a0b0f2a10180d2c20180d2230080d2a40180d2020000d4402689d200e0b8f2c10080d2a20080d2030180d2a40180d2020000d4"}}], 0xb4}, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4a2440, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x222000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x400454d8, 0x10000000000000)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x103082, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r5, 0x4068aea3, &(0x7f0000000280)) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) (async)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x1000009, 0x8000000000000001, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xc7}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r10, &(0x7f00000008c0)={0x0, &(0x7f0000000940)=[@smc={0x1e, 0x40, {0x30000000, [0x4, 0x2, 0x2, 0x0, 0x12c]}}, @smc={0x1e, 0x40, {0x6000000, [0x7ff, 0xffffffffffffff7f, 0x7, 0x9, 0x8000]}}, @uexit={0x0, 0x18, 0xe000000}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x4, 0x5, 0xfffffff7, 0x4}}, @smc={0x1e, 0x40, {0x84000004, [0x5, 0xfffffffffffff000, 0x4, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013dea3}}, @smc={0x1e, 0x40, {0x86000001, [0x9, 0x6, 0xcd, 0x3, 0x3]}}, @code={0xa, 0xe4, {"20c681d20000b8f2610080d2420180d2430080d2840080d2020000d4602e87d20020b0f2210080d2c20080d2c30080d2040080d2020000d4007008d5001ca00ee07380d20080b8f2a10080d2820080d2e30080d2440180d2020000d4a04495d200c0b8f2210080d2420080d2230080d2c40180d2020000d4402d98d20020b0f2c10180d2420180d2830080d2c40080d2020000d4e04889d200a0b8f2c10080d2a20080d2a30080d2c40180d2020000d4e0c794d20020b8f2210180d2620080d2630180d2e40180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x14, 0x1, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x161}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x48, 0x7}}, @smc={0x1e, 0x40, {0x4000000, [0x1000, 0x7, 0x3, 0x0, 0x9]}}, @smc={0x1e, 0x40, {0x20, [0xffffffffffffff00, 0xe, 0x800, 0xfffffffffffffff8, 0x7fffffff]}}, @hvc={0x32, 0x40, {0x10, [0x4, 0x8000000000000000, 0x8, 0x6c8, 0x8a58]}}, @svc={0x122, 0x40, {0x84000052, [0x34f3, 0x7fff, 0x5, 0x39, 0x62244196]}}, @hvc={0x32, 0x40, {0x3f000000, [0x3, 0xf, 0xd78, 0x0, 0x295a3119]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x3, 0x5, 0xfffffff8, 0x1}}, @irq_setup={0x46, 0x18, {0x100, 0x341}}, @mrs={0xbe, 0x18, {0x6030000000131a02}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x6, 0x4}}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013d801}}, @code={0xa, 0x84, {"406582d200c0b0f2c10180d2020180d2830080d2a40180d2020000d4e0030032007008d5007008d500c8a05e007008d5007008d5c00482d200e0b0f2610180d2220180d2830080d2240080d2020000d4007008d5c02d9ad20000b0f2810080d2e20080d2e30080d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x84000002, [0x6, 0x249, 0x9, 0x7fff, 0x1]}}, @smc={0x1e, 0x40, {0x84000008, [0x5, 0x100000001, 0x3, 0x1c, 0x4]}}], 0x5b0}, &(0x7f0000000900)=[@featur2={0x1, 0x2}], 0x1) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
eventfd2(0x9, 0x1) (async)
r12 = eventfd2(0x0, 0x1)
write$eventfd(r12, &(0x7f00000000c0)=0xfd, 0x8)

58m43.774579378s ago: executing program 32 (id=592):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000b9c000/0x1000)=nil, 0x0, 0x5, 0x10, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f000054f000/0x4000)=nil, r5, 0xa, 0x12, r4, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r6, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x110000, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xd)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bc5000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x0, {0x84000052, [0x7ff, 0x6, 0x4, 0x7, 0x6]}}, @uexit={0x0, 0x0, 0x6}, @smc={0x1e, 0x0, {0xc4000003, [0x4, 0x9, 0x4, 0xffff, 0x624]}}, @hvc={0x32, 0x0, {0xc5000021, [0x6, 0x7ff, 0x101, 0xb, 0xffc0000000000000]}}, @memwrite={0x6e, 0x0, @generic={0x1, 0xfff, 0x4}}, @its_send_cmd={0xaa, 0x0, {0x4, 0x1, 0x2, 0x6, 0x3, 0xffffffff, 0x1}}, @uexit={0x0, 0x0, 0x2}, @msr={0x14, 0x0, {0x603000000013e681, 0x3}}, @code={0xa, 0x0, {"0054007f007008d50028217e007008d500d0005f007008d5c0968fd200e0b0f2a10180d2a20180d2430080d2840180d2020000d4a0b99ad200a0b8f2810080d2e20080d2230080d2e40080d2020000d40000805200849f0d"}}, @msr={0x14, 0x0, {0x603000000013e66e, 0xdf2}}, @its_send_cmd={0xaa, 0x0, {0x1, 0x0, 0x0, 0xa, 0x8001, 0x6, 0x4}}, @uexit, @uexit={0x0, 0x0, 0x400}, @smc={0x1e, 0x0, {0xc4000004, [0xaf, 0xfffffffffffffffb, 0x96a8, 0x9, 0x8]}}, @uexit={0x0, 0x0, 0x2}, @irq_setup={0x46, 0x0, {0x1, 0x10}}], 0xffffffffffffff56}, &(0x7f0000000300)=[@featur2={0x1, 0x90}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100016)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)

58m40.379222931s ago: executing program 33 (id=593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xb}, @code={0xa, 0x9c, {"205f93d20020b8f2e10180d2e20080d2e30080d2a40180d2020000d4007008d5007008d5007008d560b584d200a0b0f2410180d2a20180d2e30080d2640180d2020000d40050200e0004601e007008d580d58bd200a0b0f2a10180d2c20180d2230080d2a40180d2020000d4402689d200e0b8f2c10080d2a20080d2030180d2a40180d2020000d4"}}], 0xb4}, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4a2440, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x222000, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x400454d8, 0x10000000000000)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x103082, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r5, 0x4068aea3, &(0x7f0000000280)) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) (async)
ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x1000009, 0x8000000000000001, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xc7}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(r10, &(0x7f00000008c0)={0x0, &(0x7f0000000940)=[@smc={0x1e, 0x40, {0x30000000, [0x4, 0x2, 0x2, 0x0, 0x12c]}}, @smc={0x1e, 0x40, {0x6000000, [0x7ff, 0xffffffffffffff7f, 0x7, 0x9, 0x8000]}}, @uexit={0x0, 0x18, 0xe000000}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x4, 0x5, 0xfffffff7, 0x4}}, @smc={0x1e, 0x40, {0x84000004, [0x5, 0xfffffffffffff000, 0x4, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013dea3}}, @smc={0x1e, 0x40, {0x86000001, [0x9, 0x6, 0xcd, 0x3, 0x3]}}, @code={0xa, 0xe4, {"20c681d20000b8f2610080d2420180d2430080d2840080d2020000d4602e87d20020b0f2210080d2c20080d2c30080d2040080d2020000d4007008d5001ca00ee07380d20080b8f2a10080d2820080d2e30080d2440180d2020000d4a04495d200c0b8f2210080d2420080d2230080d2c40180d2020000d4402d98d20020b0f2c10180d2420180d2830080d2c40080d2020000d4e04889d200a0b8f2c10080d2a20080d2a30080d2c40180d2020000d4e0c794d20020b8f2210180d2620080d2630180d2e40180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x14, 0x1, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x161}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x48, 0x7}}, @smc={0x1e, 0x40, {0x4000000, [0x1000, 0x7, 0x3, 0x0, 0x9]}}, @smc={0x1e, 0x40, {0x20, [0xffffffffffffff00, 0xe, 0x800, 0xfffffffffffffff8, 0x7fffffff]}}, @hvc={0x32, 0x40, {0x10, [0x4, 0x8000000000000000, 0x8, 0x6c8, 0x8a58]}}, @svc={0x122, 0x40, {0x84000052, [0x34f3, 0x7fff, 0x5, 0x39, 0x62244196]}}, @hvc={0x32, 0x40, {0x3f000000, [0x3, 0xf, 0xd78, 0x0, 0x295a3119]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x3, 0x5, 0xfffffff8, 0x1}}, @irq_setup={0x46, 0x18, {0x100, 0x341}}, @mrs={0xbe, 0x18, {0x6030000000131a02}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x6, 0x4}}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013d801}}, @code={0xa, 0x84, {"406582d200c0b0f2c10180d2020180d2830080d2a40180d2020000d4e0030032007008d5007008d500c8a05e007008d5007008d5c00482d200e0b0f2610180d2220180d2830080d2240080d2020000d4007008d5c02d9ad20000b0f2810080d2e20080d2e30080d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x84000002, [0x6, 0x249, 0x9, 0x7fff, 0x1]}}, @smc={0x1e, 0x40, {0x84000008, [0x5, 0x100000001, 0x3, 0x1c, 0x4]}}], 0x5b0}, &(0x7f0000000900)=[@featur2={0x1, 0x2}], 0x1) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
eventfd2(0x9, 0x1) (async)
r12 = eventfd2(0x0, 0x1)
write$eventfd(r12, &(0x7f00000000c0)=0xfd, 0x8)

41m54.692585656s ago: executing program 2 (id=670):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x11, r4, 0x40000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="b160e3205cf49a6d6465b4dfaf425b5ca9292605c021cc61c8e3ca6753bd29fc4090927e193ad96c199643bc3560bdce99750535909442bfc85a732ad4b83ad4da1b871763d668d5", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="cf933bf21d48c3d59638489eee561bbc8b46867b9803d92f0c68c05d6f5b7448e62cd4f4ed47d980d44763b52bc5e684fc7d70c3ffcf63aacaed0d944b0faa4c2bf0adeeba09daed", 0x0, 0x48)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x54181, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000340)={0x7, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000240)={0x200002f})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x58b001, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x2, 0x2020000c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000280))
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r3, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r11], 0xfffffffffffffc61}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16)

41m43.11689697s ago: executing program 3 (id=671):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r4, 0x1}) (async)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r4, 0x3}) (async)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r4, 0xa}) (async, rerun: 64)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
close(r2)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x5452, 0x2000fdfd) (async, rerun: 64)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r7, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7}) (async, rerun: 64)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000780)=[@msr={0x14, 0x20, {0x603000000013deb8, 0x8}}, @code={0xa, 0x9c, {"0000002e00b4207e00e0c00d605b89d20000b0f2210180d2620180d2430180d2840180d2020000d4606382d20080b8f2610080d2220080d2a30180d2240180d2020000d4007008d5000028d540048ad20060b0f2a10180d2620180d2a30180d2240080d2020000d400b294d20000b0f2c10180d2a20180d2430180d2040180d2020000d4000028d5"}}, @eret={0xe6, 0x18, 0xb}, @svc={0x122, 0x40, {0xc4000001, [0x3, 0xf, 0x9, 0xfffffffffffff23d, 0xffffffff]}}, @smc={0x1e, 0x40, {0x4000003, [0x2, 0x3, 0x5, 0x5, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x3, 0x2, 0x5, 0x2}}, @smc={0x1e, 0x40, {0x100, [0x9, 0x3, 0x3, 0x81, 0x401]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x4, 0xf, 0x5, 0x9, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0xe, 0x5, 0x3}}, @eret={0xe6, 0x18, 0x81}, @svc={0x122, 0x40, {0x84000001, [0x5, 0x200, 0xb0d, 0x10001, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x9, 0xe, 0x4, 0x3}}, @code={0xa, 0x84, {"000008d5007008d5000028d5000020ab804992d20060b0f2610180d2420180d2230180d2640080d2020000d4000028d5c0d582d200c0b0f2810180d2620180d2430180d2440080d2020000d4001797d200e0b8f2410080d2a20080d2a30180d2840080d2020000d40004007f000008d5"}}, @irq_setup={0x46, 0x18, {0x1, 0x3c7}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x3, 0x1, 0x8001]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x1e}}, @uexit={0x0, 0x18, 0xa}, @code={0xa, 0x9c, {"0008203880a59cd20080b8f2a10180d2620080d2a30080d2040080d2020000d400001fd6a06098d20060b8f2e10080d2420180d2230080d2640080d2020000d4030000d4c08988d200a0b0f2210180d2220080d2830180d2440180d2020000d4a0a188d200a0b0f2a10180d2e20080d2030180d2e40080d2020000d400008052007008d5000008d5"}}, @smc={0x1e, 0x40, {0xc4000053, [0x8000000000000000, 0x2, 0xd49b, 0xd6, 0x2]}}, @msr={0x14, 0x20, {0x603000000013df10, 0xe}}, @uexit={0x0, 0x18, 0x4}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x8000, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x6a3}}], 0x51c}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r10, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x4, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r13, 0x1, 0x2012, r12, 0x0) (async, rerun: 64)
r14 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) (rerun: 64)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000001c0)="a33d361af0b493795540933bca3353b5aa138d4501b19be1bf02218489dfd9b8ee5b21a65798f01040069e86292bfea1e09aecf226359a2d7d9edbcf6dc4d2f3e7cf27b307781bc0", 0x0, 0x48)

41m16.366763343s ago: executing program 3 (id=672):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x80000000000001, 0x1}}], 0x28}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x240)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000008c0)={0x1000, 0x1000})
close(r7)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

41m15.384416644s ago: executing program 2 (id=673):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0xa1}], 0x1)
syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=[@featur1={0x1, 0x4}], 0x1)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000003, [0x4, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x9, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff})

41m2.813352102s ago: executing program 2 (id=674):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000000c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

40m57.840142331s ago: executing program 3 (id=675):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1fe, 0xa}})
r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000000), 0x484000, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3})

40m50.769494769s ago: executing program 2 (id=676):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb1)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x4000})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0}) (async)
r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1ff})
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

40m39.541235266s ago: executing program 3 (id=677):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x0, 0x0, 0x79, 0x1}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
openat$kvm(0x0, 0x0, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x40305839, &(0x7f0000000040)=@attr_other={0x1000000, 0xab, 0x7f, 0x0})
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r14, 0xc018aec0, &(0x7f00000000c0)={0x1})
r15 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)

40m34.01083997s ago: executing program 2 (id=678):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000007, [0x84000051, 0xf, 0x9, 0xd, 0x3]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x400454d8, 0x110e22ffff)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
close(r7)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r10, 0x4068aea3, &(0x7f00000000c0))
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bff000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x80, [0x99b, 0x100000004, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0xc0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2b)
ioctl$KVM_SET_DEVICE_ATTR_vm(r15, 0x4018aee1, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)

40m23.208757761s ago: executing program 3 (id=679):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40049409, 0x13)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a1e000/0x400000)=nil) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

40m16.367992906s ago: executing program 2 (id=680):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x79, 0x2, 0xed, 0x0, 0x8, 0x3c, 0x6, 0x1, 0x2, 0x8, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x6, 0x6, 0x35, '\x00', 0x7, 0xde3e})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000004000000000000000ad770081000000000800000000000000010000000000000002000000000000000300000000000000040000000000000032000000000000004000000000000000530000c400000000000080"], 0x80}], 0x1, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f00000000c0)="962e8993d2fef597016e114351a44a72ac8a51a2f6b95e0a", 0x0, 0x18)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33)
ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000100)={0x800, 0xff})
r10 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0xffffffffaafd9dd2, 0xc}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r15 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000000)={r15, 0x5, 0x2, r15})
ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000140)={r15, 0x5, 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc3)

40m13.879328461s ago: executing program 3 (id=681):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async, rerun: 64)
r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x240) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) (async)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000180)="66ae48b21646fe8d3216e9dbe341f0e555d754c47f3d35e4b086d58410f63aead30f8902cfa325aec5fa4d54ef4006953bbb5697cdb0b09c13a661914f7721cbf98149362853d2ee", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r10, 0x100000a, 0x12, r9, 0x0) (async, rerun: 64)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r13, 0x2, 0x1000000000000) (async, rerun: 64)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000adc000/0x400000)=nil) (async, rerun: 64)
r14 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0xc5000020, [0x8, 0x7, 0xa, 0x0, 0x1]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x3, 0x0})
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x7c}}], 0x28}, 0x0, 0x0)

39m29.768519692s ago: executing program 34 (id=680):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x79, 0x2, 0xed, 0x0, 0x8, 0x3c, 0x6, 0x1, 0x2, 0x8, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x6, 0x6, 0x35, '\x00', 0x7, 0xde3e})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000004000000000000000ad770081000000000800000000000000010000000000000002000000000000000300000000000000040000000000000032000000000000004000000000000000530000c400000000000080"], 0x80}], 0x1, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f00000000c0)="962e8993d2fef597016e114351a44a72ac8a51a2f6b95e0a", 0x0, 0x18)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33)
ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000100)={0x800, 0xff})
r10 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0xffffffffaafd9dd2, 0xc}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r15 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000000)={r15, 0x5, 0x2, r15})
ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000140)={r15, 0x5, 0x1})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc3)

39m25.998453447s ago: executing program 35 (id=681):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async, rerun: 64)
r4 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x240) (async, rerun: 64)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) (async)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000180)="66ae48b21646fe8d3216e9dbe341f0e555d754c47f3d35e4b086d58410f63aead30f8902cfa325aec5fa4d54ef4006953bbb5697cdb0b09c13a661914f7721cbf98149362853d2ee", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r10, 0x100000a, 0x12, r9, 0x0) (async, rerun: 64)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r13, 0x2, 0x1000000000000) (async, rerun: 64)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000adc000/0x400000)=nil) (async, rerun: 64)
r14 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0xc5000020, [0x8, 0x7, 0xa, 0x0, 0x1]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x3, 0x0})
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x7c}}], 0x28}, 0x0, 0x0)

22m17.517082087s ago: executing program 5 (id=735):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c521}}], 0x18}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1000, 0x40000000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22m15.819049327s ago: executing program 4 (id=736):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x400454cd, 0x1)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0x800000000000001})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
r11 = eventfd2(0xd, 0x1)
close(r11)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r11, 0x0, 0x500)
r12 = eventfd2(0x0, 0x0)
close(r12)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r12, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000000)=0x7})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)

22m2.072762178s ago: executing program 5 (id=737):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfd000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x2d0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0x5460, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0x8000})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bfd000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x4, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x1000})
munmap(&(0x7f0000b66000/0x1000)=nil, 0x1000)

21m53.886961915s ago: executing program 4 (id=738):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x2, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e22ffff)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8521, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)

21m39.234983226s ago: executing program 5 (id=739):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bc2000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$arm64(r0, 0x0, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) (async)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
munmap(&(0x7f0000c97000/0x4000)=nil, 0x4000) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c7e000/0x3000)=nil, r3, 0x8, 0x13, r1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3c)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x700001a, 0x11, r5, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) (async)
write$eventfd(r10, &(0x7f00000001c0), 0xfdef)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
write$eventfd(r7, &(0x7f0000000180)=0x5, 0xfffffde3) (async)
write$eventfd(r7, 0x0, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, 0x0, &(0x7f0000000100)=[@featur1={0x1, 0x83}], 0x1)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa)

21m27.607104324s ago: executing program 4 (id=740):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x3, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000000)=@attr_pmu_init)
write$eventfd(r2, &(0x7f00000001c0), 0xe80)

21m20.915288593s ago: executing program 5 (id=741):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r2})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x10000, 0x4000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x6})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x7f)
syz_kvm_setup_cpu$arm64(r9, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r13=>0xffffffffffffffff, 0x1})
write$eventfd(r13, &(0x7f00000001c0), 0xe80)

21m12.750659086s ago: executing program 4 (id=742):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, <r2=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0x7, &(0x7f0000000040)=0xc364})

20m57.999999079s ago: executing program 4 (id=743):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x5, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000080)=0x5})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeab, &(0x7f0000000000)={0xbf4})

20m57.518933633s ago: executing program 5 (id=744):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x9)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x7, <r7=>0xffffffffffffffff})
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r8 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r11, 0x1})
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r11, 0x3})
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r11, 0xf})
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0x40086602, 0x110e22ffff)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r14, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r14, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r14, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)

20m44.869968397s ago: executing program 4 (id=745):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc6) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x380)

20m33.635284742s ago: executing program 5 (id=746):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r7, 0x0, 0x30, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000)
write$eventfd(r9, &(0x7f0000000040), 0x8) (async)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4000ae8d, &(0x7f0000000340)={0x5, 0x8})

19m57.690332485s ago: executing program 36 (id=745):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc6) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x380)

19m44.589287435s ago: executing program 37 (id=746):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r7, 0x0, 0x30, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000)
write$eventfd(r9, &(0x7f0000000040), 0x8) (async)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4000ae8d, &(0x7f0000000340)={0x5, 0x8})

3m16.458602679s ago: executing program 6 (id=785):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x22)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x100)
close(r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfd000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)

2m53.298249814s ago: executing program 6 (id=786):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80001, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x8, 0x4, 0x0}) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8001)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f0000000200)}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4008000000003)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x1000400000000001) (async)
r7 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r10 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r9, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x7f)

2m47.820469937s ago: executing program 7 (id=787):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100036, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000000000/0x400000)=nil) (async)
ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000000)=0x8)
write$eventfd(r5, &(0x7f00000001c0), 0xfdef)

2m20.901342839s ago: executing program 6 (id=788):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="4bead90a8a524c79f126541ba60686d7378e2f7235828bcf3fa4a80d5e3c6753e0fbf42973da38e59cd4b2dc174f7f7ed37dd8abc6a52715ea2d8a070028857f943eed4506eaf7a1", 0x0, 0x48)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x151400, 0x0)

2m17.196756085s ago: executing program 7 (id=789):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x6, 0x2, &(0x7f0000000200)=0x3}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x0, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x88, &(0x7f0000000040)=0x1}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x1, &(0x7f0000000000)=0x22a}) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000da8000/0x2000)=nil, 0x2000) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

2m0.168932692s ago: executing program 6 (id=790):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x106000})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x60300000001000d4, 0x0}) (async)
ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f00000000c0))

1m55.328180892s ago: executing program 7 (id=791):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x420)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000140)=0xfc8b})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x0, 0x1000003, 0x4010, r9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

1m37.138617856s ago: executing program 6 (id=792):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x7, 0x6, 0xfffffff9, 0x4}}], 0x28}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
syz_kvm_vgic_v3_setup(r8, 0x100001, 0x180)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000a5a000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x11, r13, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000040)={0x7, <r16=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r16, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x4, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m27.690404961s ago: executing program 7 (id=793):
r0 = mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@smc={0x1e, 0x40, {0x3f000000, [0x1, 0x4, 0x7fffffffffffffff, 0x9, 0x7fff]}}, @svc={0x122, 0x40, {0x8600ff01, [0x7, 0x633, 0x8, 0x40, 0x86]}}, @code={0xa, 0x84, {"000008d5008008d5000008d5007008d50004002f00008012202f89d20080b8f2a10080d2020080d2e30080d2c40180d2020000d4208780d200c0b8f2e10180d2220180d2830180d2840180d2020000d4a04d82d20080b0f2a10080d2c20180d2030180d2e40080d2020000d40000191e"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x80000000, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0x1, 0x5, 0x6, 0x3}}, @mrs={0xbe, 0x18, {0x6030000000139828}}, @uexit={0x0, 0x18, 0x8}], 0x18c}, &(0x7f0000000040)=[@featur2={0x1, 0xd1}], 0x1)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="1412981e8d35178267451e18718a618a0a9e0fc0d84d39ca9ae1e83bbfac06596511c91f1d13b90fbab331f315770c5751427f06bfa3471c48a39bd1c8a2f91270ae9e128b83d98f", 0x0, 0x48) (rerun: 64)

1m9.494954165s ago: executing program 7 (id=794):
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
close(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013d807}}, @mrs={0xbe, 0x18, {0x603000000013df12}}, @code={0xa, 0x3c, {"000008d5000008d5007008d5008008d500a0206e0020601e008008d5000008d50068203cbf3003d5"}}, @mrs={0xbe, 0x18, {0x603000000013df5c}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x119}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x8, 0x6}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0x2, 0x10001, 0x7fffffff, 0x2}}, @msr={0x14, 0x20, {0x6030000000138010, 0x5}}, @smc={0x1e, 0x40, {0x84000008, [0x8b, 0x1776, 0x7, 0x9, 0x9]}}], 0x16c}, &(0x7f0000000140)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x2, 0x82}) (async)
r3 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000b10000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)

1m6.286529097s ago: executing program 6 (id=795):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000000c0)={0xb74, 0x1ff})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000040)={0x5, 0x100, 0x80, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x2, 0x1, 0xffff1000, 0x2000, &(0x7f0000def000/0x2000)=nil, 0x1800000000000, r3})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_ONE_REG(r8, 0x8040aeb6, 0xfffffffffffffffe)

48.888177528s ago: executing program 7 (id=796):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0xffffffffaafd9dd2, 0xc}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000073000/0x400000)=nil)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013e005}}], 0x18}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1f)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x7, <r11=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0xc2e, 0x0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, 0x0, 0x300000a, 0x40010, 0xffffffffffffffff, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r13, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r13, 0x0, 0x5c1fd1b6564d2f2, r8, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x19)

18.60828117s ago: executing program 38 (id=795):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000000c0)={0xb74, 0x1ff})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000040)={0x5, 0x100, 0x80, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x2, 0x1, 0xffff1000, 0x2000, &(0x7f0000def000/0x2000)=nil, 0x1800000000000, r3})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_ONE_REG(r8, 0x8040aeb6, 0xfffffffffffffffe)

0s ago: executing program 39 (id=796):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0xffffffffaafd9dd2, 0xc}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000073000/0x400000)=nil)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013e005}}], 0x18}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1f)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x7, <r11=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0xc2e, 0x0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, 0x0, 0x300000a, 0x40010, 0xffffffffffffffff, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r13, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r13, 0x0, 0x5c1fd1b6564d2f2, r8, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x19)

kernel console output (not intermixed with test programs):

[  435.886900][ T3170] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.519247][ T3170] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:10291' (ED25519) to the list of known hosts.
[  668.456528][   T25] audit: type=1400 audit(667.630:60): avc:  denied  { name_bind } for  pid=3331 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  669.438842][   T25] audit: type=1400 audit(668.620:61): avc:  denied  { execute } for  pid=3332 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  669.471624][   T25] audit: type=1400 audit(668.650:62): avc:  denied  { execute_no_trans } for  pid=3332 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  694.516929][   T25] audit: type=1400 audit(693.700:63): avc:  denied  { mounton } for  pid=3332 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  694.564984][   T25] audit: type=1400 audit(693.730:64): avc:  denied  { mount } for  pid=3332 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  694.655519][ T3332] cgroup: Unknown subsys name 'net'
[  694.717040][   T25] audit: type=1400 audit(693.900:65): avc:  denied  { unmount } for  pid=3332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  695.311448][ T3332] cgroup: Unknown subsys name 'cpuset'
[  695.557106][ T3332] cgroup: Unknown subsys name 'rlimit'
[  697.384090][   T25] audit: type=1400 audit(696.560:66): avc:  denied  { setattr } for  pid=3332 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  697.435191][   T25] audit: type=1400 audit(696.580:67): avc:  denied  { mounton } for  pid=3332 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  697.443149][   T25] audit: type=1400 audit(696.610:68): avc:  denied  { mount } for  pid=3332 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  699.799356][ T3335] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  699.833688][   T25] audit: type=1400 audit(699.010:69): avc:  denied  { relabelto } for  pid=3335 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  699.874885][   T25] audit: type=1400 audit(699.050:70): avc:  denied  { write } for  pid=3335 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  700.170384][   T25] audit: type=1400 audit(699.350:71): avc:  denied  { read } for  pid=3332 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  700.215538][   T25] audit: type=1400 audit(699.380:72): avc:  denied  { open } for  pid=3332 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  700.269818][ T3332] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  759.809749][   T25] audit: type=1400 audit(758.990:73): avc:  denied  { execmem } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  766.927216][   T25] audit: type=1400 audit(766.100:75): avc:  denied  { open } for  pid=3338 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  766.939402][   T25] audit: type=1400 audit(766.090:74): avc:  denied  { read } for  pid=3339 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  767.028258][   T25] audit: type=1400 audit(766.180:76): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  767.317300][   T25] audit: type=1400 audit(766.480:77): avc:  denied  { module_request } for  pid=3338 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  768.378341][   T25] audit: type=1400 audit(767.560:78): avc:  denied  { sys_module } for  pid=3339 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  792.336365][ T3339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  792.619584][ T3339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  794.358513][ T3338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  794.518203][ T3338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.437581][ T3339] hsr_slave_0: entered promiscuous mode
[  806.470989][ T3339] hsr_slave_1: entered promiscuous mode
[  807.347243][ T3338] hsr_slave_0: entered promiscuous mode
[  807.399708][ T3338] hsr_slave_1: entered promiscuous mode
[  807.447448][ T3338] debugfs: 'hsr0' already exists in 'hsr'
[  807.465615][ T3338] Cannot create hsr debugfs directory
[  813.824630][   T25] audit: type=1400 audit(813.000:79): avc:  denied  { create } for  pid=3339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  813.901068][   T25] audit: type=1400 audit(813.080:80): avc:  denied  { write } for  pid=3339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  813.976373][   T25] audit: type=1400 audit(813.160:81): avc:  denied  { read } for  pid=3339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  814.081349][ T3339] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  814.497504][ T3339] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  814.879361][ T3339] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  815.234803][ T3339] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  817.085642][ T3338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  817.297775][ T3338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  817.481380][ T3338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  817.747530][ T3338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  835.627074][ T3339] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.881030][ T3338] 8021q: adding VLAN 0 to HW filter on device bond0
[  898.406739][ T3339] veth0_vlan: entered promiscuous mode
[  899.121036][ T3339] veth1_vlan: entered promiscuous mode
[  901.947992][ T3338] veth0_vlan: entered promiscuous mode
[  902.066652][ T3339] veth0_macvtap: entered promiscuous mode
[  902.507170][ T3339] veth1_macvtap: entered promiscuous mode
[  902.991010][ T3338] veth1_vlan: entered promiscuous mode
[  905.558169][ T3418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  905.587459][ T3418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  905.604760][ T3418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  905.617567][ T3418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.835780][ T3338] veth0_macvtap: entered promiscuous mode
[  906.538356][ T3338] veth1_macvtap: entered promiscuous mode
[  908.700482][   T25] audit: type=1400 audit(907.880:82): avc:  denied  { mount } for  pid=3339 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  908.935594][   T25] audit: type=1400 audit(908.090:83): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/syzkaller.r8FPrd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  909.196562][   T25] audit: type=1400 audit(908.350:84): avc:  denied  { mount } for  pid=3339 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  909.665530][   T25] audit: type=1400 audit(908.840:85): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/syzkaller.r8FPrd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  909.875040][   T25] audit: type=1400 audit(909.020:86): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/syzkaller.r8FPrd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  910.011612][ T3383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  910.053419][ T3383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  910.057979][ T3383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  910.064285][ T3383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  910.606125][   T25] audit: type=1400 audit(909.750:87): avc:  denied  { unmount } for  pid=3339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  910.840832][   T25] audit: type=1400 audit(910.020:88): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  910.958055][   T25] audit: type=1400 audit(910.080:89): avc:  denied  { mount } for  pid=3339 comm="syz-executor" name="/" dev="gadgetfs" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  911.204881][   T25] audit: type=1400 audit(910.380:90): avc:  denied  { mount } for  pid=3339 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  911.477471][   T25] audit: type=1400 audit(910.600:91): avc:  denied  { mounton } for  pid=3339 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  913.007241][ T3339] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  914.235148][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  914.240876][   T25] audit: type=1400 audit(913.390:93): avc:  denied  { read write } for  pid=3339 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  914.305120][   T25] audit: type=1400 audit(913.470:94): avc:  denied  { open } for  pid=3339 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  914.383917][   T25] audit: type=1400 audit(913.500:95): avc:  denied  { ioctl } for  pid=3339 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  924.353735][   T25] audit: type=1400 audit(923.500:96): avc:  denied  { read } for  pid=3491 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  924.430406][   T25] audit: type=1400 audit(923.610:97): avc:  denied  { open } for  pid=3491 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  924.960016][   T25] audit: type=1400 audit(924.140:98): avc:  denied  { ioctl } for  pid=3491 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  927.754456][   T25] audit: type=1400 audit(926.910:99): avc:  denied  { write } for  pid=3491 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  953.104735][   T25] audit: type=1400 audit(952.280:100): avc:  denied  { append } for  pid=3509 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  962.179220][   T25] audit: type=1400 audit(961.340:101): avc:  denied  { execute } for  pid=3515 comm="syz.0.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  967.653428][   T25] audit: type=1400 audit(966.830:102): avc:  denied  { setattr } for  pid=3518 comm="syz.1.8" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1236.737320][ T3679] kvm [3679]: Failed to find VMA for hva 0x20d8d000
[ 1237.228889][ T3679] kvm [3679]: Failed to find VMA for hva 0x20c01000
[ 1411.696762][   T25] audit: type=1400 audit(1410.870:103): avc:  denied  { ioctl } for  pid=3773 comm="syz.1.87" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1547.219072][ T3856] kvm [3856]: Failed to find VMA for hva 0x21016000
[ 1628.125916][   T25] audit: type=1400 audit(1627.240:104): avc:  denied  { create } for  pid=3884 comm="syz.1.119" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1922.377811][   T25] audit: type=1400 audit(1921.500:105): avc:  denied  { map } for  pid=4059 comm="syz.0.171" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1922.416054][   T25] audit: type=1400 audit(1921.560:106): avc:  denied  { execute } for  pid=4059 comm="syz.0.171" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2543.425449][   T25] audit: type=1400 audit(2542.540:107): avc:  denied  { map } for  pid=4435 comm="syz.0.286" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=17362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2543.466830][   T25] audit: type=1400 audit(2542.640:108): avc:  denied  { read } for  pid=4435 comm="syz.0.286" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=17362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2788.701230][ T4565] KVM: debugfs: duplicate directory 4565-4
[ 2800.895685][   T25] audit: type=1400 audit(2800.060:109): avc:  denied  { write } for  pid=4573 comm="syz.0.326" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=19079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2817.749492][   T25] audit: type=1400 audit(2816.930:110): avc:  denied  { map } for  pid=4581 comm="syz.1.328" path="pipe:[2789]" dev="pipefs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2817.878292][   T25] audit: type=1400 audit(2817.060:111): avc:  denied  { execute } for  pid=4581 comm="syz.1.328" path="pipe:[2789]" dev="pipefs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2917.805623][ T4633] KVM: debugfs: duplicate directory 4633-13
[ 2918.280376][ T4633] KVM: debugfs: duplicate directory 4633-13
[ 2944.005366][ T4641] kvm [4640]: Unsupported guest access at: eeef0000
[ 2944.005366][ T4641]  { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write },
[ 2944.806484][ T4641] kvm [4641]: Failed to find VMA for hva 0x20d8d000
[ 4536.531486][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4537.338370][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4538.755883][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4539.748073][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4567.156916][ T5502] hsr_slave_0: entered promiscuous mode
[ 4567.228281][ T5502] hsr_slave_1: entered promiscuous mode
[ 4567.288638][ T5502] debugfs: 'hsr0' already exists in 'hsr'
[ 4567.294620][ T5502] Cannot create hsr debugfs directory
[ 4570.919300][ T5505] hsr_slave_0: entered promiscuous mode
[ 4571.018847][ T5505] hsr_slave_1: entered promiscuous mode
[ 4571.085656][ T5505] debugfs: 'hsr0' already exists in 'hsr'
[ 4571.103802][ T5505] Cannot create hsr debugfs directory
[ 4586.299623][ T5502] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 4587.344479][ T5502] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 4588.155732][ T5502] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 4589.767330][ T5502] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 4595.586803][ T5505] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 4596.089666][ T5505] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 4596.730673][ T5505] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 4597.161474][ T5505] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 4610.519401][ T4587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4612.549898][ T4587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4614.058456][ T4587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4616.038716][ T4587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4636.720303][ T4587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4636.980085][ T4587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4637.096259][ T4587] bond0 (unregistering): Released all slaves
[ 4640.135556][ T4587] hsr_slave_0: left promiscuous mode
[ 4640.475472][ T4587] hsr_slave_1: left promiscuous mode
[ 4641.377067][ T4587] veth1_macvtap: left promiscuous mode
[ 4641.381141][ T4587] veth0_macvtap: left promiscuous mode
[ 4641.426885][ T4587] veth1_vlan: left promiscuous mode
[ 4641.439887][ T4587] veth0_vlan: left promiscuous mode
[ 4665.851459][ T5508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4666.850404][ T5508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4668.076207][ T5508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4669.231044][ T5508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4670.657952][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4671.417150][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4694.104962][ T5508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4694.281390][ T5508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4694.415633][ T5508] bond0 (unregistering): Released all slaves
[ 4697.777593][ T5508] hsr_slave_0: left promiscuous mode
[ 4697.968624][ T5508] hsr_slave_1: left promiscuous mode
[ 4699.055983][ T5508] veth1_macvtap: left promiscuous mode
[ 4699.084258][ T5508] veth0_macvtap: left promiscuous mode
[ 4699.091526][ T5508] veth1_vlan: left promiscuous mode
[ 4699.136807][ T5508] veth0_vlan: left promiscuous mode
[ 4807.819422][ T5502] veth0_vlan: entered promiscuous mode
[ 4807.873808][ T5505] veth0_vlan: entered promiscuous mode
[ 4809.780019][ T5502] veth1_vlan: entered promiscuous mode
[ 4810.135538][ T5505] veth1_vlan: entered promiscuous mode
[ 4815.148936][ T5502] veth0_macvtap: entered promiscuous mode
[ 4815.590207][ T5505] veth0_macvtap: entered promiscuous mode
[ 4816.346179][ T5502] veth1_macvtap: entered promiscuous mode
[ 4816.961361][ T5505] veth1_macvtap: entered promiscuous mode
[ 4821.801586][ T5586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4821.878608][ T5591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4821.925045][ T5591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4821.949377][ T5591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4822.454478][ T4587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4822.463500][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4822.464459][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4822.465286][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4828.325054][   T25] audit: type=1400 audit(4827.500:112): avc:  denied  { unmount } for  pid=5502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 5636.864116][ T4778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5639.033799][ T4778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5641.089981][ T4778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5643.205441][ T4778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5668.163369][ T4778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5669.109916][ T4778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5669.715262][ T4778] bond0 (unregistering): Released all slaves
[ 5672.438064][ T4778] hsr_slave_0: left promiscuous mode
[ 5672.576437][ T4778] hsr_slave_1: left promiscuous mode
[ 5673.978204][ T4778] veth1_macvtap: left promiscuous mode
[ 5673.994502][ T4778] veth0_macvtap: left promiscuous mode
[ 5673.996673][ T4778] veth1_vlan: left promiscuous mode
[ 5673.998202][ T4778] veth0_vlan: left promiscuous mode
[ 5717.189487][ T4778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5719.316273][ T4778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5720.701279][ T4778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5722.298744][ T4778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5741.226309][ T4778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5741.346504][ T4778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5741.440454][ T4778] bond0 (unregistering): Released all slaves
[ 5743.771033][ T4778] hsr_slave_0: left promiscuous mode
[ 5743.839427][ T4778] hsr_slave_1: left promiscuous mode
[ 5744.347069][ T4778] veth1_macvtap: left promiscuous mode
[ 5744.374025][ T4778] veth0_macvtap: left promiscuous mode
[ 5744.395658][ T4778] veth1_vlan: left promiscuous mode
[ 5744.420392][ T4778] veth0_vlan: left promiscuous mode
[ 5798.987119][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5799.248995][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5802.948046][ T6137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5803.217404][ T6137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5829.860854][ T6135] hsr_slave_0: entered promiscuous mode
[ 5829.999107][ T6135] hsr_slave_1: entered promiscuous mode
[ 5836.161202][ T6137] hsr_slave_0: entered promiscuous mode
[ 5836.267037][ T6137] hsr_slave_1: entered promiscuous mode
[ 5836.335782][ T6137] debugfs: 'hsr0' already exists in 'hsr'
[ 5836.353655][ T6137] Cannot create hsr debugfs directory
[ 5852.008113][ T6135] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 5852.666293][ T6135] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 5853.496551][ T6135] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 5854.788301][ T6135] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 5859.497032][ T6137] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 5860.150110][ T6137] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 5860.706668][ T6137] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 5861.157194][ T6137] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 5892.639443][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5897.797859][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6048.826708][ T6135] veth0_vlan: entered promiscuous mode
[ 6050.113485][ T6135] veth1_vlan: entered promiscuous mode
[ 6055.407677][ T6137] veth0_vlan: entered promiscuous mode
[ 6056.280843][ T6135] veth0_macvtap: entered promiscuous mode
[ 6057.928594][ T6135] veth1_macvtap: entered promiscuous mode
[ 6058.171775][ T6137] veth1_vlan: entered promiscuous mode
[ 6065.093780][ T4778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6065.206008][ T4778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6065.265079][ T4778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6065.311728][ T6303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6067.060363][ T6137] veth0_macvtap: entered promiscuous mode
[ 6068.854659][ T6137] veth1_macvtap: entered promiscuous mode
[ 6076.503969][ T6303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6076.611133][ T6303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6076.624964][ T6303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6076.666254][ T4954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6462.865766][ T6573] FAULT_INJECTION: forcing a failure.
[ 6462.865766][ T6573] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 6462.964497][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.5.715 Not tainted syzkaller #0 PREEMPT 
[ 6462.965162][ T6573] Hardware name: linux,dummy-virt (DT)
[ 6462.965644][ T6573] Call trace:
[ 6462.966044][ T6573]  show_stack+0x2c/0x3c (C)
[ 6462.967950][ T6573]  __dump_stack+0x30/0x40
[ 6462.968348][ T6573]  dump_stack_lvl+0xd8/0x12c
[ 6462.968678][ T6573]  dump_stack+0x1c/0x28
[ 6462.968979][ T6573]  should_fail_ex+0x56c/0x6d8
[ 6462.969204][ T6573]  should_fail+0x14/0x24
[ 6462.969442][ T6573]  should_fail_usercopy+0x20/0x30
[ 6462.969674][ T6573]  _inline_copy_from_user+0x44/0x18c
[ 6462.969988][ T6573]  kstrtouint_from_user+0x70/0xf4
[ 6462.970287][ T6573]  proc_fail_nth_write+0x54/0x208
[ 6462.970597][ T6573]  vfs_write+0x2c0/0xb7c
[ 6462.970823][ T6573]  ksys_write+0x108/0x1fc
[ 6462.971037][ T6573]  __arm64_sys_write+0x98/0xcc
[ 6462.971258][ T6573]  invoke_syscall+0x90/0x230
[ 6462.971589][ T6573]  el0_svc_common+0x120/0x2f4
[ 6462.971890][ T6573]  do_el0_svc+0x58/0x74
[ 6462.972178][ T6573]  el0_svc+0x5c/0x238
[ 6462.972507][ T6573]  el0t_64_sync_handler+0x84/0x12c
[ 6462.972809][ T6573]  el0t_64_sync+0x198/0x19c
[ 6848.756065][ T3418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6850.650559][ T3418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6852.705902][ T3418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6854.091406][ T3418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6879.018128][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6879.171010][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6879.310874][ T3418] bond0 (unregistering): Released all slaves
[ 6880.611194][ T3418] hsr_slave_0: left promiscuous mode
[ 6880.709486][ T3418] hsr_slave_1: left promiscuous mode
[ 6881.109831][ T3418] veth1_macvtap: left promiscuous mode
[ 6881.120150][ T3418] veth0_macvtap: left promiscuous mode
[ 6881.137194][ T3418] veth1_vlan: left promiscuous mode
[ 6881.145979][ T3418] veth0_vlan: left promiscuous mode
[ 6915.260043][ T3418] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6917.458644][ T3418] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6920.564638][ T3418] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6922.770143][ T3418] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6947.165529][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6947.651584][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6948.075186][ T3418] bond0 (unregistering): Released all slaves
[ 6950.566673][ T3418] hsr_slave_0: left promiscuous mode
[ 6950.785891][ T3418] hsr_slave_1: left promiscuous mode
[ 6951.901141][ T3418] veth1_macvtap: left promiscuous mode
[ 6951.978892][ T3418] veth0_macvtap: left promiscuous mode
[ 6952.014976][ T3418] veth1_vlan: left promiscuous mode
[ 6952.034682][ T3418] veth0_vlan: left promiscuous mode
[ 6998.341567][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6998.640800][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7003.023576][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7003.346662][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7033.680352][ T6705] hsr_slave_0: entered promiscuous mode
[ 7033.809939][ T6705] hsr_slave_1: entered promiscuous mode
[ 7041.219718][ T6709] hsr_slave_0: entered promiscuous mode
[ 7041.309759][ T6709] hsr_slave_1: entered promiscuous mode
[ 7041.415879][ T6709] debugfs: 'hsr0' already exists in 'hsr'
[ 7041.419022][ T6709] Cannot create hsr debugfs directory
[ 7060.717007][ T6705] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 7061.561238][ T6705] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 7062.466249][ T6705] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 7064.214412][ T6705] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 7069.883865][ T6709] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 7070.507725][ T6709] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 7070.921804][ T6709] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 7071.641424][ T6709] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 7108.436486][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7115.758541][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7293.905487][ T6705] veth0_vlan: entered promiscuous mode
[ 7295.714987][ T6705] veth1_vlan: entered promiscuous mode
[ 7302.317215][ T6709] veth0_vlan: entered promiscuous mode
[ 7303.446828][ T6705] veth0_macvtap: entered promiscuous mode
[ 7305.029335][ T6705] veth1_macvtap: entered promiscuous mode
[ 7305.357331][ T6709] veth1_vlan: entered promiscuous mode
[ 7312.554920][ T6158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7312.624595][ T6735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7312.676794][ T4268] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7312.787727][ T4268] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 7313.277288][ T6709] veth0_macvtap: entered promiscuous mode
[ 7314.699357][ T6709] veth1_macvtap: entered promiscuous mode
[ 7324.121316][ T4954] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7324.126344][ T4954] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7324.138729][ T4954] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7324.206644][ T4587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8099.434975][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8100.754027][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8133.459328][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8134.134697][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8161.107656][ T7220] hsr_slave_0: entered promiscuous mode
[ 8161.268187][ T7220] hsr_slave_1: entered promiscuous mode
[ 8161.495189][ T7220] debugfs: 'hsr0' already exists in 'hsr'
[ 8161.503593][ T7220] Cannot create hsr debugfs directory
[ 8200.404903][ T7229] hsr_slave_0: entered promiscuous mode
[ 8200.539857][ T7229] hsr_slave_1: entered promiscuous mode
[ 8200.685238][ T7229] debugfs: 'hsr0' already exists in 'hsr'
[ 8200.734075][ T7229] Cannot create hsr debugfs directory
[ 8207.513649][ T7220] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 8208.250949][ T7220] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 8209.035241][ T7220] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 8209.936281][ T7220] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 8239.791122][ T7229] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 8240.867197][ T7229] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 8241.717002][ T7229] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 8242.620432][ T7229] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 8274.227730][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8298.116035][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8394.275947][   T27] INFO: task syz.7.796:7215 blocked for more than 430 seconds.
[ 8394.344828][   T27]       Not tainted syzkaller #0
[ 8394.347926][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 8394.374262][   T27] task:syz.7.796       state:D stack:0     pid:7215  tgid:7215  ppid:6709   task_flags:0x400040 flags:0x00000011
[ 8394.376100][   T27] Call trace:
[ 8394.376534][   T27]  __switch_to+0x584/0xb00 (T)
[ 8394.377133][   T27]  __schedule+0x200c/0x3428
[ 8394.377630][   T27]  schedule+0xac/0x27c
[ 8394.378085][   T27]  schedule_timeout+0x68/0x1ec
[ 8394.378620][   T27]  do_wait_for_common+0x28c/0x440
[ 8394.379099][   T27]  wait_for_completion+0x44/0x5c
[ 8394.379605][   T27]  __synchronize_srcu+0x2a4/0x320
[ 8394.380124][   T27]  synchronize_srcu+0x3d0/0x4f8
[ 8394.380669][   T27]  mmu_notifier_unregister+0x320/0x428
[ 8394.381184][   T27]  kvm_put_kvm+0x698/0xbe0
[ 8394.381624][   T27]  kvm_vm_release+0x58/0x78
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 8394.629644][   T27]  __fput+0x4ac/0x978
[ 8394.643236][   T27]  ____fput+0x20/0x58
[ 8394.643867][   T27]  task_work_run+0x1b8/0x250
[ 8394.644351][   T27]  exit_to_user_mode_loop+0x110/0x188
[ 8394.644840][   T27]  el0_svc+0x17c/0x238
[ 8394.645354][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 8394.645886][   T27]  el0t_64_sync+0x198/0x19c
[ 8394.647471][   T27] 
[ 8394.647471][   T27] Showing all locks held in the system:
[ 8394.647964][   T27] 1 lock held by khungtaskd/27:
[ 8394.648364][   T27]  #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 8394.650931][   T27] 3 locks held by kworker/u4:3/43:
[ 8394.651434][   T27] 1 lock held by dhcpcd/3170:
[ 8394.836200][   T27] 2 locks held by getty/3198:
[ 8394.866652][   T27]  #0: 73f00000122e28a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 8394.915386][   T27]  #1: f7ff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 8394.917326][   T27] 2 locks held by syz-executor/3332:
[ 8394.917692][   T27] 2 locks held by kworker/u4:6/3418:
[ 8394.918005][   T27]  #0: 34f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 8394.920067][   T27]  #1: ffff8000a3d17c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 8395.103256][   T27] 3 locks held by kworker/u4:8/4268:
[ 8395.106182][   T27] 3 locks held by kworker/u4:2/4587:
[ 8395.141203][   T27] 3 locks held by kworker/u4:7/4778:
[ 8395.168093][   T27] 3 locks held by kworker/u4:5/5586:
[ 8395.184017][   T27] 3 locks held by kworker/u4:13/6303:
[ 8395.184584][   T27] 2 locks held by kworker/u4:10/6719:
[ 8395.184925][   T27]  #0: 34f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 8395.186989][   T27]  #1: ffff80008ef37c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 8395.188723][   T27] 2 locks held by kworker/u4:11/6735:
[ 8395.189103][   T27] 3 locks held by kworker/u4:15/6937:
[ 8395.189443][   T27] 2 locks held by kworker/0:6/6949:
[ 8395.189803][   T27] 2 locks held by kworker/0:7/7056:
[ 8395.190133][   T27] 2 locks held by syz.6.795/7212:
[ 8395.190483][   T27] 3 locks held by kworker/u4:1/7252:
[ 8395.190852][   T27] 3 locks held by kworker/u4:14/7284:
[ 8395.191191][   T27] 1 lock held by modprobe/7348:
[ 8395.335241][   T27] 
[ 8395.355898][   T27] =============================================
[ 8395.355898][   T27] 
[ 8395.360240][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 8395.363320][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 8395.364601][   T27] Hardware name: linux,dummy-virt (DT)
[ 8395.365472][   T27] Call trace:
[ 8395.366150][   T27]  show_stack+0x2c/0x3c (C)
[ 8395.367202][   T27]  __dump_stack+0x30/0x40
[ 8395.368156][   T27]  dump_stack_lvl+0x30/0x12c
[ 8395.369117][   T27]  dump_stack+0x1c/0x28
[ 8395.370031][   T27]  vpanic+0x1d4/0x4e4
[ 8395.370868][   T27]  vpanic+0x0/0x4e4
[ 8395.371661][   T27]  hung_task_panic+0x0/0x2c
[ 8395.372594][   T27]  kthread+0x794/0x99c
[ 8395.373489][   T27]  ret_from_fork+0x10/0x20
[ 8395.375233][   T27] Kernel Offset: disabled
[ 8395.375984][   T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 8395.377081][   T27] Memory Limit: none
[ 8395.379281][   T27] Rebooting in 86400 seconds..