last executing test programs:

34m35.444444007s ago: executing program 0 (id=414):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x3})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010000a, &(0x7f0000000100)=0xc5c9})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0xffffffffffffffff)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2e)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r11, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x27)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x86000001, [0x1, 0x401, 0x5, 0x1, 0x2]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000080)=@arm64_extra={0x603000000013c02b, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r17 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})

34m32.117831092s ago: executing program 1 (id=415):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010001c, &(0x7f0000000000)=0x3ff}) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (rerun: 64)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 64)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) (rerun: 64)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) (async)
syz_kvm_setup_cpu$arm64(r1, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000280)) (async)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0xe}}], 0x28}, 0x0, 0xfffffffffffffd20) (async)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) (async)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)

34m19.48071013s ago: executing program 1 (id=416):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0xa000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r1, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000001c0)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r9, 0x1})
eventfd2(0x5, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x1, 0x4, 0x8, r9, 0x2})
ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000c58000/0x4000)=nil})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x2, r9, 0xf})
mmap$KVM_VCPU(&(0x7f0000ebf000/0x1000)=nil, r1, 0xa, 0x1c013, r4, 0x0)

34m15.046138099s ago: executing program 0 (id=417):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0x6e}], 0x18}, 0x0, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x4fe842, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x84, &(0x7f0000000080)=0xfffffffffffffff7})

34m7.269620958s ago: executing program 1 (id=418):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@irq_setup={0x46, 0x18, {0x4, 0x1e7}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

34m6.561102026s ago: executing program 0 (id=419):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x22082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x601d, 0x2})
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f00000000c0))
close(r2)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)

33m58.190470311s ago: executing program 0 (id=420):
ioctl$KVM_ARM_VCPU_FINALIZE(0xffffffffffffffff, 0x4004aec2, &(0x7f0000000000)=0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501841, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000380)=[{0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x10, 0x9, 0x4, 0x4}}, @svc={0x122, 0x40, {0x80, [0x1, 0x7fff, 0x3, 0xc5e, 0x6]}}, @irq_setup={0x46, 0x18, {0x0, 0x38e}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x7, 0x3, 0x0, 0x2}}, @irq_setup={0x46, 0x18, {0x0, 0x2ca}}, @mrs={0xbe, 0x18, {0x603000000013c661}}, @smc={0x1e, 0x40, {0xc400000d, [0x6, 0x2, 0x100, 0x828, 0x4]}}, @code={0xa, 0x6c, {"000008d5007008d500004048c02480d20040b8f2410080d2e20180d2a30180d2240080d2020000d440198ad20060b0f2e10180d2e20180d2230080d2240080d2020000d40068203c007008d500a8300e0000409b00082078"}}, @msr={0x14, 0x20, {0x6030000000138002, 0x4}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x3d1}}, @eret={0xe6, 0x18, 0x7}, @eret={0xe6, 0x18, 0xd2de}, @svc={0x122, 0x40, {0xc0000043, [0x80, 0xffffffffffffffff, 0x7f2, 0xfffffffffffffffc, 0x34c6]}}, @smc={0x1e, 0x40, {0xc4000007, [0x52f9, 0x1, 0x2cedce85, 0x2, 0xfffffffffffffa92]}}, @hvc={0x32, 0x40, {0xc4000014, [0x3, 0x1ff, 0x5, 0x2, 0x1]}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3d9}}], 0x2e4}], 0x1, 0x0, &(0x7f00000003c0), 0x1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000440)=@arm64_extra={0x603000000013c512, &(0x7f0000000400)=0x81})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5)
syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000900)=[{0x0, &(0x7f00000004c0)=[@mrs={0xbe, 0x18, {0x603000000013e18d}}, @irq_setup={0x46, 0x18, {0x0, 0x2fa}}, @hvc={0x32, 0x40, {0x40000000, [0x9, 0x95b1, 0x8, 0x7, 0x8]}}, @eret={0xe6, 0x18, 0x100000000}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x4, 0x9, 0x4, 0x7}}, @irq_setup={0x46, 0x18, {0x1, 0x21d}}, @svc={0x122, 0x40, {0x84000006, [0x100000000, 0x6, 0x400, 0x4, 0x3]}}, @uexit={0x0, 0x18, 0x54b}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0xfffffffffffffffa, 0xf}}, @uexit={0x0, 0x18, 0x3}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x2ca}}, @code={0xa, 0x9c, {"008008d5007008d540b18ed20000b0f2a10080d2020180d2430080d2440080d2020000d40000008b00a0800da04c95d200a0b0f2210080d2c20180d2e30080d2e40180d2020000d4000008d540c49fd200e0b0f2610080d2020080d2e30180d2240180d2020000d4c06786d20060b8f2e10080d2820180d2c30180d2840180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x14, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x9, 0x8001, 0x8, 0x2}}, @svc={0x122, 0x40, {0xc4000014, [0x68, 0x2, 0x9, 0x7f, 0x4]}}, @smc={0x1e, 0x40, {0x8, [0x3, 0x100000001, 0x1ad, 0xffffffffffffffff, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280, 0x8000000000000000, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x3, 0x2, 0x7, 0x401, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013802d}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18, 0xbb}, @mrs={0xbe, 0x18, {0x603000000013f602}}, @svc={0x122, 0x40, {0x30000000, [0x9, 0x4b84, 0x3, 0x2]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x29d}}], 0x424}], 0x1, 0x0, &(0x7f0000000940)=[@featur1={0x1, 0xb6}], 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7)
syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000e00)=[{0x0, &(0x7f0000000980)=[@smc={0x1e, 0x40, {0x84004001, [0x0, 0x100000000, 0xd, 0x6, 0x9248]}}, @uexit={0x0, 0x18, 0xfffffffffffffc01}, @irq_setup={0x46, 0x18, {0x3, 0x137}}, @code={0xa, 0x84, {"0098a10e80358dd20040b8f2410080d2820080d2030080d2440180d2020000d4008008d5007008d5008008d50098210e008000c8408d94d200c0b8f2210080d2e20180d2830180d2040180d2020000d4007008d500c285d20060b8f2010080d2c20080d2230180d2040080d2020000d4"}}, @eret={0xe6, 0x18, 0x7fffffff}, @msr={0x14, 0x20, {0x603000000013dea9, 0x2}}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013c667}}, @smc={0x1e, 0x40, {0x0, [0x2, 0x7ff, 0xe, 0xf, 0xffff]}}, @code={0xa, 0x9c, {"a02d87d20000b8f2810180d2e20180d2630080d2640180d2020000d400c4a00e008008d580c49bd20000b0f2c10180d2620080d2a30180d2240080d2020000d4007008d5007008d5007008d5400a84d200c0b0f2e10080d2220180d2030180d2c40180d2020000d4007008d5e0089fd20060b0f2010080d2a20080d2830180d2840080d2020000d4"}}, @hvc={0x32, 0x40, {0xffff, [0x1, 0xf, 0x8, 0x7fffffffffffffff, 0xd]}}, @smc={0x1e, 0x40, {0xc4000003, [0xb, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0xf, 0x3, 0x6, 0x1}}, @msr={0x14, 0x20, {0x603000000013deed, 0xeb3}}, @smc={0x1e, 0x40, {0x1, [0x5, 0x4, 0x401, 0x9, 0xd]}}, @msr={0x14, 0x20, {0x603000000013c520, 0x1}}, @code={0xa, 0xb4, {"007c0053000008d5c06d9ad20080b8f2c10080d2220080d2c30080d2a40080d2020000d40000a00d0084000d80309bd20040b8f2610180d2e20180d2830180d2640180d2020000d4807098d20020b8f2c10080d2a20180d2e30180d2640080d2020000d440e398d20040b8f2210080d2e20180d2030080d2e40080d2020000d40004601e40c681d20040b8f2e10080d2620080d2030180d2a40180d2020000d4"}}, @hvc={0x32, 0x40, {0x82000001, [0x7d, 0x6db, 0x4, 0xffffffffffff1e21, 0x7]}}], 0x45c}], 0x1, 0x0, &(0x7f0000000e40)=[@featur1={0x1, 0x26}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000ec0)=@attr_other={0x0, 0x4, 0x2, &(0x7f0000000e80)=0x2})
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000f00))
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000001200)={0x0, &(0x7f0000000f40)=[@uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013df64, 0x2}}, @svc={0x122, 0x40, {0x2000000, [0x3, 0x2, 0xd, 0x4, 0x10]}}, @hvc={0x32, 0x40, {0x84000011, [0x1, 0x3, 0xf, 0xffffffff00000001, 0x71]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xfd28, 0x100000000, 0x1}}, @msr={0x14, 0x20, {0x603000000013c804, 0x4}}, @mrs={0xbe, 0x18, {0x6030000000138025}}, @mrs={0xbe, 0x18, {0x603000000013da21}}, @code={0xa, 0x84, {"007008d5402190d20060b8f2410080d2220080d2030080d2640080d2020000d420388ed200a0b8f2810180d2220180d2a30180d2040180d2020000d4007008d500008052600b84d20060b8f2810080d2a20180d2c30180d2c40080d2020000d4000008d5008008d50078207e0048201e"}}, @irq_setup={0x46, 0x18, {0x2, 0x12}}, @smc={0x1e, 0x40, {0x84000009, [0x4, 0x1000, 0x3, 0xc, 0x13240685]}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x47f, 0x3, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e099}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0xa, 0xa, 0x200, 0x1}}], 0x2b4}, &(0x7f0000001240)=[@featur2={0x1, 0xb0}], 0x1)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x5c0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000001280)=@arm64)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000001300)=@other={0x1ff, &(0x7f00000012c0)=0xffffffffffffff42})
ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000001340))
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000001380)={0x4, 0x6})
syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001540)=[{0x0, &(0x7f00000013c0)=[@msr={0x14, 0x20, {0x603000000013da21, 0x47}}, @hvc={0x32, 0x40, {0x400, [0x5, 0x5, 0xf, 0x2, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0xe, 0x7, 0x4, 0x3}}, @svc={0x122, 0x40, {0x30000000, [0x3, 0x5, 0x3, 0x0, 0xfff]}}, @msr={0x14, 0x20, {0x603000000013e66f, 0x80}}, @msr={0x14, 0x20, {0x603000000013c518, 0x9}}, @msr={0x14, 0x20, {0x60300000001380a4}}, @msr={0x14, 0x20, {0x603000000013e6c0, 0x3}}, @eret={0xe6, 0x18, 0x73}, @uexit={0x0, 0x18, 0x7ff}], 0x178}], 0x1, 0x0, &(0x7f0000001580)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000015c0)=@attr_pvtime_ipa)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000001600)={0x3, 0xffffffffffffffff, 0x1})
r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4)
ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f0000001a40)={0x2710, 0x200, 0x200, &(0x7f0000001640)=[0x7, 0xfffffffffffffffc, 0x2, 0x0, 0xc, 0x401, 0x3, 0x0, 0x8, 0x0, 0x60, 0x7, 0x4, 0x9, 0xa5, 0x4, 0xc, 0x6, 0x1, 0x4, 0x6, 0x52c, 0x4, 0x7ff, 0x7, 0x6be, 0x7, 0x1, 0x3, 0xffffffff96f42a05, 0x100, 0x6, 0x101, 0x6, 0x7ff, 0xb56, 0x1, 0x2, 0x0, 0x5, 0x1, 0x0, 0x2, 0x1, 0x4, 0x1, 0x1, 0x5, 0x7, 0x9, 0x10000, 0x2, 0x81, 0xffff, 0xc, 0x4, 0xffffffff, 0x1, 0x80, 0x1, 0x5, 0x5b71, 0x7, 0x2, 0x1, 0x81, 0x5, 0x6cf49820, 0x6, 0x100, 0x1000, 0xf8, 0x0, 0x10000, 0x4, 0x0, 0xe12, 0x7, 0xff, 0x100000001, 0x8, 0x8b, 0x1, 0x0, 0x2, 0x4, 0x3, 0x2, 0xd2, 0x10000, 0x1e, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0xe53c, 0x7, 0xffffffff, 0x1, 0x7268, 0x932, 0x6, 0x38, 0x0, 0x7aea, 0x9, 0x2c9c, 0x4, 0x97, 0xffffffff00000001, 0x8, 0x3, 0x101, 0x8, 0x2, 0x1, 0x2, 0x0, 0x4, 0x3, 0x9c1, 0x101, 0x1000000000000, 0x7, 0x0, 0x2]})
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000001a80)=0xa26)

33m57.857337804s ago: executing program 1 (id=421):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r7, 0xfffffffffffffffe, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r7, 0xffffffffffffffff, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x86000001, [0x80000000000, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0x84000050, [0x2, 0x1, 0x2, 0x3, 0x3]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

33m52.208358385s ago: executing program 0 (id=422):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600040, 0x0)
close(r2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100034, &(0x7f00000001c0)=0x9})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@riscv64_core={0x803000000020000d, &(0x7f00000000c0)=0x4})
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r5, 0xa00000001, 0x320)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4})

33m47.675976724s ago: executing program 1 (id=423):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
r4 = eventfd2(0x2, 0x80000)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="5af600f6b34e08c180f948c13e2727ba279cacc033d6bd28118e0e1e50390ff2f8a1aa8366bb4c33115d61c97d9387dac1b147ed1b515c14bcb89051301caef704371680ab057973", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)

33m42.403619693s ago: executing program 0 (id=424):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000008, 0x8032, 0xffffffffffffffff, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013e090, 0x0}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x54000, 0x122000})

33m40.338444335s ago: executing program 1 (id=425):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000ab8000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb)

32m56.166320893s ago: executing program 32 (id=424):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000008, 0x8032, 0xffffffffffffffff, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013e090, 0x0}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x54000, 0x122000})

32m53.937134386s ago: executing program 33 (id=425):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000ab8000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb)

24m25.438194973s ago: executing program 3 (id=443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7f)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013c2b1, 0x0})
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bc2000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x404c80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r15, 0xc0189436, 0x100000000000000)
ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000100)={0x100001f, 0x1})

24m15.068082974s ago: executing program 2 (id=444):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000380)="f30149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a3ff7fbc51869be2e2e0000000000000f000000000000000001000000000000000000000000000e00", 0x0, 0x34)
openat$kvm(0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22c2c0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x26)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r11 = syz_kvm_vgic_v3_setup(r9, 0x2, 0x1c0)
r12 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0x401c5820, 0x20000000)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)=0xffffffffffbffffe})
ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5e6)
r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c01a, &(0x7f0000000000)=0x2})

24m2.95966019s ago: executing program 3 (id=445):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600080, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000040)={0x5, 0x40})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x9, 0xa014})
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x9, 0x7, &(0x7f00000000c0)=0xa})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000140)={0x6, 0x300000, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21)
r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x5, 0x2, &(0x7f0000000200)=0x5})
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000280)={0x1fe, 0x0, &(0x7f0000ffc000/0x3000)=nil})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40)
ioctl$KVM_CAP_ARM_MTE(r8, 0x4068aea3, &(0x7f00000002c0))
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r5, 0x4068aea3, &(0x7f0000000340))
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000440)={0x0, &(0x7f00000003c0)=[@irq_setup={0x46, 0x18, {0x0, 0x1fd}}, @mrs={0xbe, 0x18, {0x603000000013e649}}, @irq_setup={0x46, 0x18, {0x4, 0x386}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x2f5}}], 0x70}, &(0x7f0000000480)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000004c0)={0x6, 0x2, 0x2})
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000500)={0x2710, 0x0, &(0x7f0000e1a000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000580)=@attr_other={0x0, 0x4, 0x7fffffff, &(0x7f0000000540)})
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000005c0)={0x7b, "12e5a9f63199b210c9d0f5f24b32ede754fab9634f12673260ae9f25e762a4737839cb9579fd10233a696f4628c8870f4a22f8700534b787b514c6a67aac9d4a2ed8aa5527cddd4d9b49a8945f075cf01240f83b80c30a362762423422898af672ca0fc187f4557d64270db10c2e3baeb559ceb0cd478cafd3591c"})
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000640))
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000006c0)=@riscv64_config={0x8030000000100001, &(0x7f0000000680)=0x2})
close(r3)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000740)=@attr_other={0x0, 0x4, 0x8, &(0x7f0000000700)=0x4})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(0xffffffffffffffff, 0x4010aeb5, &(0x7f0000000780)={0x1000, 0x4})

23m56.944278917s ago: executing program 2 (id=446):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000140)=0x89e3})
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x0, 0xa0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2c)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xffff1000, 0x1000, &(0x7f00003f1000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000000000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r12, 0x400454ce, 0x110c230008)
r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r14 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x4, 0x0})

23m46.558294122s ago: executing program 3 (id=447):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e70000e300", 0x0, 0x48)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe6)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x3000003, 0x1010, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r9 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

23m27.683645953s ago: executing program 2 (id=448):
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x2, 0x5, 0x3, 0x7, 0x4, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x5000, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
write$eventfd(r4, &(0x7f00000001c0)=0x4, 0x4d)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c600, 0xfefefee0}}], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100028, &(0x7f0000000000)=0xfff})
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)

23m25.020358939s ago: executing program 3 (id=449):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f00000000c0)) (async)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) (async)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xc0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f00000003c0)=[@smc={0x1e, 0x40, {0xef000000, [0x50, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0) (async)
r7 = syz_kvm_vgic_v3_setup(r5, 0x3, 0x60)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x6}) (async)
write$eventfd(0xffffffffffffffff, &(0x7f0000000180)=0xea1d, 0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23m16.021419793s ago: executing program 2 (id=450):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23m12.846843207s ago: executing program 3 (id=451):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x100)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r6, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r7, r10, 0xffffffffffffffff)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r6, r9, 0xfffffffffffffffe)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x2})
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, 0xfffffffffffffffe)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
r15 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)
r17 = ioctl$KVM_CREATE_VM(r14, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r17, 0xb701, 0x0)

23m2.086862159s ago: executing program 2 (id=452):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000080)=0x2})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x19) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x4d)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async)
r12 = eventfd2(0x0, 0x0)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000015000/0x4000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) (async)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3) (async, rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000005c0)={0x1, 0x8, 0x1}}) (rerun: 32)
r13 = openat$kvm(0x0, &(0x7f0000000000), 0x800, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010004a, &(0x7f0000000000)=0x7f1})
ioctl$KVM_CREATE_VM(r13, 0x401c5820, 0x20000000)

22m45.0273263s ago: executing program 3 (id=453):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6102, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r11, &(0x7f00000001c0)=0x9, 0x1d)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, &(0x7f0000000240)=[@featur1={0x1, 0x26}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@mrs={0xbe, 0x18, {0x603000000013c521}}], 0x18}, &(0x7f0000000280)=[@featur1={0x1, 0x85}], 0x1)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001505c1, &(0x7f0000000100)=0x7})
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000007)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf})

22m44.822018351s ago: executing program 2 (id=454):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0x800454d7, 0xffffbffffffc) (async)
ioctl$KVM_CREATE_VM(r3, 0x800454d7, 0xffffbffffffc)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5e6)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c01a, &(0x7f0000000000)=0x2})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) (async)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r14, 0x3, 0x40b2811, r13, 0x6000)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x82}, @irq_setup={0x46, 0x18, {0x1, 0x3ad}}, @code={0xa, 0xb4, {"208d9dd200a0b0f2e10180d2820080d2c30180d2440080d2020000d4601999d200a0b8f2010180d2820180d2830180d2c40180d2020000d4808d8dd200c0b0f2010180d2c20180d2030180d2a40180d2020000d40078205e60fb80d20080b0f2e10180d2e20180d2a30080d2840180d2020000d4007008d5808e8dd20080b8f2210080d2020080d2a30080d2e40180d2020000d40020bf0d007008d51f0000eb"}}, @hvc={0x32, 0x40, {0x44008010, [0x5, 0x8, 0xfbb, 0x8, 0x7ff]}}, @hvc={0x32, 0x40, {0x4000, [0x4, 0xc, 0xfff, 0x9, 0x8000]}}, @irq_setup={0x46, 0x18, {0x1, 0x24f}}, @msr={0x14, 0x20, {0x50280000001a6583, 0x8000000000000001}}, @hvc={0x32, 0x40, {0x80000001, [0x9, 0x8, 0x5, 0xc, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e531}}, @uexit={0x0, 0x18, 0x8001}, @memwrite={0x6e, 0x30, @generic={0x126000, 0x210, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x9, 0x6, 0x50d7, 0x1}}, @uexit={0x0, 0x18, 0xff}, @msr={0x14, 0x20, {0x603000000013dea9, 0x7}}], 0x2a4}, &(0x7f0000000100)=[@featur1={0x1, 0xd0}], 0x1) (async)
r15 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x82}, @irq_setup={0x46, 0x18, {0x1, 0x3ad}}, @code={0xa, 0xb4, {"208d9dd200a0b0f2e10180d2820080d2c30180d2440080d2020000d4601999d200a0b8f2010180d2820180d2830180d2c40180d2020000d4808d8dd200c0b0f2010180d2c20180d2030180d2a40180d2020000d40078205e60fb80d20080b0f2e10180d2e20180d2a30080d2840180d2020000d4007008d5808e8dd20080b8f2210080d2020080d2a30080d2e40180d2020000d40020bf0d007008d51f0000eb"}}, @hvc={0x32, 0x40, {0x44008010, [0x5, 0x8, 0xfbb, 0x8, 0x7ff]}}, @hvc={0x32, 0x40, {0x4000, [0x4, 0xc, 0xfff, 0x9, 0x8000]}}, @irq_setup={0x46, 0x18, {0x1, 0x24f}}, @msr={0x14, 0x20, {0x50280000001a6583, 0x8000000000000001}}, @hvc={0x32, 0x40, {0x80000001, [0x9, 0x8, 0x5, 0xc, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e531}}, @uexit={0x0, 0x18, 0x8001}, @memwrite={0x6e, 0x30, @generic={0x126000, 0x210, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x9, 0x6, 0x50d7, 0x1}}, @uexit={0x0, 0x18, 0xff}, @msr={0x14, 0x20, {0x603000000013dea9, 0x7}}], 0x2a4}, &(0x7f0000000100)=[@featur1={0x1, 0xd0}], 0x1)
ioctl$KVM_SET_REGS(r15, 0x4360ae82, &(0x7f0000000440)={[0x2, 0xfffffffffffffffb, 0x101, 0x8, 0x2, 0x1, 0x8, 0x8, 0x6, 0x7, 0x3, 0x4, 0x3, 0x0, 0x5, 0x4], 0xfec00000, 0x90000})
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r8, 0x4010aeb5, &(0x7f0000000040)={0x2, 0xba43})
ioctl$KVM_CHECK_EXTENSION(r0, 0xc0189436, 0x100000000000000)

21m59.10440881s ago: executing program 34 (id=453):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6102, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r11, &(0x7f00000001c0)=0x9, 0x1d)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, &(0x7f0000000240)=[@featur1={0x1, 0x26}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@mrs={0xbe, 0x18, {0x603000000013c521}}], 0x18}, &(0x7f0000000280)=[@featur1={0x1, 0x85}], 0x1)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001505c1, &(0x7f0000000100)=0x7})
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000007)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x80000000, 0x6000, 0x0, 0xffffffffffffffff, 0xf})

21m53.087448745s ago: executing program 35 (id=454):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0x800454d7, 0xffffbffffffc) (async)
ioctl$KVM_CREATE_VM(r3, 0x800454d7, 0xffffbffffffc)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x5e6)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c01a, &(0x7f0000000000)=0x2})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31) (async)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r14, 0x3, 0x40b2811, r13, 0x6000)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x82}, @irq_setup={0x46, 0x18, {0x1, 0x3ad}}, @code={0xa, 0xb4, {"208d9dd200a0b0f2e10180d2820080d2c30180d2440080d2020000d4601999d200a0b8f2010180d2820180d2830180d2c40180d2020000d4808d8dd200c0b0f2010180d2c20180d2030180d2a40180d2020000d40078205e60fb80d20080b0f2e10180d2e20180d2a30080d2840180d2020000d4007008d5808e8dd20080b8f2210080d2020080d2a30080d2e40180d2020000d40020bf0d007008d51f0000eb"}}, @hvc={0x32, 0x40, {0x44008010, [0x5, 0x8, 0xfbb, 0x8, 0x7ff]}}, @hvc={0x32, 0x40, {0x4000, [0x4, 0xc, 0xfff, 0x9, 0x8000]}}, @irq_setup={0x46, 0x18, {0x1, 0x24f}}, @msr={0x14, 0x20, {0x50280000001a6583, 0x8000000000000001}}, @hvc={0x32, 0x40, {0x80000001, [0x9, 0x8, 0x5, 0xc, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e531}}, @uexit={0x0, 0x18, 0x8001}, @memwrite={0x6e, 0x30, @generic={0x126000, 0x210, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x9, 0x6, 0x50d7, 0x1}}, @uexit={0x0, 0x18, 0xff}, @msr={0x14, 0x20, {0x603000000013dea9, 0x7}}], 0x2a4}, &(0x7f0000000100)=[@featur1={0x1, 0xd0}], 0x1) (async)
r15 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x82}, @irq_setup={0x46, 0x18, {0x1, 0x3ad}}, @code={0xa, 0xb4, {"208d9dd200a0b0f2e10180d2820080d2c30180d2440080d2020000d4601999d200a0b8f2010180d2820180d2830180d2c40180d2020000d4808d8dd200c0b0f2010180d2c20180d2030180d2a40180d2020000d40078205e60fb80d20080b0f2e10180d2e20180d2a30080d2840180d2020000d4007008d5808e8dd20080b8f2210080d2020080d2a30080d2e40180d2020000d40020bf0d007008d51f0000eb"}}, @hvc={0x32, 0x40, {0x44008010, [0x5, 0x8, 0xfbb, 0x8, 0x7ff]}}, @hvc={0x32, 0x40, {0x4000, [0x4, 0xc, 0xfff, 0x9, 0x8000]}}, @irq_setup={0x46, 0x18, {0x1, 0x24f}}, @msr={0x14, 0x20, {0x50280000001a6583, 0x8000000000000001}}, @hvc={0x32, 0x40, {0x80000001, [0x9, 0x8, 0x5, 0xc, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e531}}, @uexit={0x0, 0x18, 0x8001}, @memwrite={0x6e, 0x30, @generic={0x126000, 0x210, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x9, 0x6, 0x50d7, 0x1}}, @uexit={0x0, 0x18, 0xff}, @msr={0x14, 0x20, {0x603000000013dea9, 0x7}}], 0x2a4}, &(0x7f0000000100)=[@featur1={0x1, 0xd0}], 0x1)
ioctl$KVM_SET_REGS(r15, 0x4360ae82, &(0x7f0000000440)={[0x2, 0xfffffffffffffffb, 0x101, 0x8, 0x2, 0x1, 0x8, 0x8, 0x6, 0x7, 0x3, 0x4, 0x3, 0x0, 0x5, 0x4], 0xfec00000, 0x90000})
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r8, 0x4010aeb5, &(0x7f0000000040)={0x2, 0xba43})
ioctl$KVM_CHECK_EXTENSION(r0, 0xc0189436, 0x100000000000000)

12m20.786733964s ago: executing program 4 (id=471):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)=@arm64_fp={0x6040000000100097, &(0x7f0000000000)=0xb}) (async, rerun: 64)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x8080000, 0x2000, 0x1}) (rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f00000000c0)=0x2) (async)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0xfffffffffffffffa, 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000140)={0x10201, 0xa, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0xffffffffffff450e, r4}) (async)
syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, &(0x7f0000000200)=[@msr={0x14, 0x20, {0x603000000013df5a}}, @mrs={0xbe, 0x18, {0x603000000013df7b}}, @hvc={0x32, 0x40, {0x81000001, [0x2000000, 0xd, 0x7fffffffffffffff, 0x6, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0x4, 0x4, 0x200}}, @smc={0x1e, 0x40, {0xc4000004, [0x4, 0x9, 0x8000000000000000, 0x7f, 0x3fa]}}, @mrs={0xbe, 0x18, {0x603000000013e304}}, @hvc={0x32, 0x40, {0x1, [0x7fffffffffffffff, 0xfff, 0x0, 0x2, 0x9]}}, @eret={0xe6, 0x18, 0xe70}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x9c, {"007008d5000040fc40869dd20020b8f2e10080d2c20080d2230180d2840080d2020000d420d48ad20020b8f2210180d2420180d2a30080d2a40080d2020000d4000860b8001ce00e000028d5007008d5a01697d200a0b0f2210180d2a20080d2a30180d2e40080d2020000d460d088d200c0b8f2410180d2a20080d2430080d2c40080d2020000d4"}}, @uexit={0x0, 0x18, 0x14e}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x36}}, @hvc={0x32, 0x40, {0xffff, [0x80, 0x0, 0x4, 0x5, 0x6]}}, @eret={0xe6, 0x18, 0x7}, @eret={0xe6, 0x18, 0xfffffffffffffe23}], 0x2b4}], 0x1, 0x0, &(0x7f0000000500)=[@featur2={0x1, 0x94}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000580)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000540)=0x7fffffffffffffff}) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a8d000/0x400000)=nil)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) (async)
r7 = eventfd2(0x3, 0x80000)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000005c0)={r7, 0xfffffff7, 0x3, r1}) (async, rerun: 32)
ioctl$KVM_ARM_VCPU_FINALIZE(r7, 0x4004aec2, &(0x7f0000000600)=0x2) (async, rerun: 32)
r8 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x101, 0x0, 0x4, r8, 0x4})
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x100000000) (async, rerun: 32)
ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000680)={0xb6, 0x0, 0x6}) (async, rerun: 32)
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000c40)={0x0, &(0x7f0000000700)=[@msr={0x14, 0x20, {0x603000000013c4d0, 0x7769}}, @hvc={0x32, 0x40, {0x84000000, [0x7, 0x7, 0x8, 0xb, 0x7ff]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x400, 0x7, 0xb}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x8000}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0xf, 0x101, 0x1}}, @smc={0x1e, 0x40, {0x400, [0x401, 0x61, 0x1, 0x3, 0x8]}}, @irq_setup={0x46, 0x18, {0x3, 0x16f}}, @svc={0x122, 0x40, {0x0, [0x100000001, 0x8, 0x0, 0x2, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x4, 0x0, 0xfffeffff, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2f2d5fdca3b1c2ef, 0x143e, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x215}}, @mrs={0xbe, 0x18, {0x603000000013dea1}}, @eret={0xe6, 0x18, 0x9}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x6, 0x240, 0xf49, 0x1}}, @smc={0x1e, 0x40, {0x800, [0x7fffffffffffffff, 0xffffffff, 0xfff, 0x5, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013e18d}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x1ff90, 0x1, 0x4}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff0, 0x8}}, @svc={0x122, 0x40, {0x20, [0xacc, 0x0, 0x280, 0x0, 0x8]}}, @uexit={0x0, 0x18, 0xffff}, @mrs={0xbe, 0x18, {0x603000000013f664}}, @irq_setup={0x46, 0x18, {0x4, 0x30c}}, @mrs={0xbe, 0x18, {0x603000000013def7}}, @irq_setup={0x46, 0x18, {0x2, 0x364}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x135}}, @code={0xa, 0x84, {"000008d500359bd20060b0f2e10180d2620180d2630180d2240080d2020000d4008008d5007008d5809899d20080b8f2610080d2020180d2e30080d2a40180d2020000d4007008d5007008d5000008d5007008d5605c80d20060b8f2610180d2a20080d2030180d2640080d2020000d4"}}, @code={0xa, 0x84, {"007008d5000008d5000008d5c0169ed20020b0f2a10180d2420080d2030080d2240180d2020000d4008008d5008008d5000008d5008008d5a05681d20020b0f2810180d2220180d2230180d2e40180d2020000d4807289d200e0b0f2010180d2c20180d2e30180d2440180d2020000d4"}}], 0x510}, &(0x7f0000000c80)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_GET_SREGS(r9, 0x8000ae83, &(0x7f0000000cc0))
ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000e40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000e00)=0x8001}) (async)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000e80)={0x4})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000f00)=@attr_arm64={0x0, 0x0, 0x1, &(0x7f0000000ec0)=0x2})
ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000f80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000f40)={0x405, 0xfd83, 0x2}}) (async)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000001000)=@riscv64_config={0x8030000000100007, &(0x7f0000000fc0)=0x2})
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000001040)={0x8, 0x8})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000001080)={0x9, 0xffffffffffffffff, 0x1}) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001400)=[{0x0, &(0x7f00000010c0)=[@uexit={0x0, 0x18, 0xe8d6}, @smc={0x1e, 0x40, {0x80000002, [0x7f, 0x0, 0x5, 0x2be5a55a, 0x78]}}, @svc={0x122, 0x40, {0x8000, [0xfffffffffffffff8, 0x3, 0x10000, 0x2, 0x6]}}, @uexit={0x0, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013c665}}, @its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x1, 0x5, 0x4, 0x8, 0x3}}, @irq_setup={0x46, 0x18, {0xfffffff8, 0x2a3}}, @code={0xa, 0x6c, {"000000ac60bd85d200e0b0f2210180d2220080d2a30080d2c40180d2020000d400004039000008d5000028d50080c00d0014c0da007008d50070005fe0e982d200e0b0f2a10180d2e20180d2230080d2040080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x0, 0x34d}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x200, 0x7fffffff, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3d}}, @code={0xa, 0x9c, {"0050200e008008d5000028d540d495d20020b0f2010080d2820080d2a30080d2e40180d2020000d4000040d3800781d200c0b0f2810080d2220180d2a30180d2e40080d2020000d4804a92d20020b8f2410180d2e20080d2a30080d2240080d2020000d4df3003d580b892d20080b8f2410080d2620180d2a30180d2c40080d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x80, 0x5, 0x6}}, @eret={0xe6, 0x18, 0x1ff}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0xfffffe3c, 0x8, 0x3}}, @eret={0xe6, 0x18, 0x822c}], 0x308}], 0x1, 0x0, &(0x7f0000001440)=[@featur2={0x1, 0x10}], 0x1)

12m8.351283503s ago: executing program 4 (id=473):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x3000003, 0x1010, r2, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

12m1.496212071s ago: executing program 5 (id=474):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x2, &(0x7f0000000000)=0xd})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

11m43.443721386s ago: executing program 4 (id=475):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async, rerun: 64)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (rerun: 64)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r3, 0x100000a, 0x12, r2, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0)
openat$kvm(0x0, 0x0, 0x301602, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r3, 0xe, 0x16831, r5, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (rerun: 32)

11m40.779296305s ago: executing program 5 (id=476):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0xa, 0x4}})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df62, 0xc00000}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11m26.294244768s ago: executing program 4 (id=477):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
mmap$KVM_VCPU(&(0x7f0000602000/0x1000)=nil, r0, 0x1, 0x10010, r1, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x40010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000759000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000780)=[@mrs={0xbe, 0x18, {0x6030000000138080}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x3c6}}, @code={0xa, 0x9c, {"008c200e204d87d200a0b8f2810080d2420180d2c30180d2a40080d2020000d400c0400d000028d580398fd20080b8f2c10080d2020180d2430080d2840180d2020000d40000259e007008d5007008d5c0a89fd200c0b8f2410180d2420080d2430180d2a40080d2020000d4e01490d200e0b8f2c10180d2020180d2630180d2440180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0x1, 0x9, 0x1000, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x0, 0x6, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x4, 0x4, 0x1, 0x5, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4a65e25b151fa409, 0x4, 0xa}}, @smc={0x1e, 0x40, {0xc4000005, [0x9, 0x0, 0x10, 0xc, 0x401]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0xe9, 0x4}}, @uexit={0x0, 0x18, 0x8001}, @hvc={0x32, 0x40, {0x86000000, [0xffff, 0x5, 0x6, 0x7, 0x5]}}, @smc={0x1e, 0x40, {0x84000013, [0x40, 0x8, 0x4, 0xfffffffffffffe01, 0xf69]}}, @smc={0x1e, 0x40, {0x2000000, [0x10, 0x5, 0x7f, 0x9, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0xe, 0xb96, 0x1000, 0x3}}, @svc={0x122, 0x40, {0x84000002, [0x101, 0x8, 0x7ff, 0x6, 0x8001]}}, @msr={0x14, 0x20, {0x603000000013f528, 0xfb2}}, @hvc={0x32, 0x40, {0x80008000, [0x1, 0xf, 0x81, 0xfff]}}, @msr={0x14, 0x20, {0x603000000013c2a9, 0x7fffffff}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc00, 0x1, 0xf}}], 0x3e4}, &(0x7f00000003c0)=[@featur2={0x1, 0x4}], 0x1)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

11m21.646813206s ago: executing program 5 (id=478):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r4, 0x4068aea3, &(0x7f0000000240))
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r11 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0x5, 0x2, r11})
write$eventfd(r11, &(0x7f0000000080)=0x7, 0x8)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f0000000400)={0x20003, 0x0, {[0x62, 0x5, 0x4, 0x93c0000000000000, 0x6, 0x40, 0xcb, 0x6fe3, 0xbe, 0x7b, 0x8, 0x4, 0x7fffffff, 0x40, 0x8000000000000001, 0x2], [0x1, 0x6, 0x8, 0x10001, 0x80000000, 0xfffffffffffffff8, 0x5, 0x9, 0xa474, 0x18, 0x6, 0x7, 0x200, 0xa9, 0x84dc, 0x2], [0x8001, 0x80000000, 0x7, 0xd416, 0xd, 0x3, 0x7, 0xffff, 0x1, 0x9aa5, 0x7, 0x8, 0x4e6, 0x42b, 0x40, 0x5], [0x8, 0x15b, 0x100000000, 0x2, 0x3, 0x7000000, 0x1, 0x5, 0x8, 0x5, 0x7ff, 0x8, 0x9, 0x1, 0x1, 0x8]}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

11m12.788249254s ago: executing program 4 (id=479):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x3000003, 0x1010, r2, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

10m57.480750368s ago: executing program 5 (id=480):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bc2000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$arm64(r0, 0x0, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000))
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x8280, 0x0)
close(r2)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000cd6000/0x2000)=nil, 0x0, 0x280000b, 0x10010, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead)
r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@mrs={0xbe, 0x8, {0x603000000013d921}}], 0x65}, &(0x7f00000001c0)=[@featur1={0x1, 0xca}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r9 = eventfd2(0x0, 0x0)
close(r9)
openat$kvm(0xffffff9c, &(0x7f0000000200), 0xf0730, 0x1f01)
write$eventfd(r9, &(0x7f0000000180)=0x5, 0xfffffde3)
write$eventfd(r9, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r0, 0x0, &(0x7f0000000100)=[@featur2={0x1, 0x48}], 0x1)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

10m48.846291723s ago: executing program 4 (id=481):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r6}) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x5000})
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000080)={0xa0000, 0x1d})
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = eventfd2(0x8801, 0x800)
r10 = eventfd2(0x400, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r10, 0x5, 0x2, r10}) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r9, 0x5, 0x2, r9})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000))

10m39.909224657s ago: executing program 5 (id=482):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0x8933, 0x110e227ffe) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)

10m28.475781741s ago: executing program 5 (id=483):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a67000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100032, &(0x7f0000000040)=0x40})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

10m1.75028098s ago: executing program 36 (id=481):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r6}) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x5000})
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000080)={0xa0000, 0x1d})
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = eventfd2(0x8801, 0x800)
r10 = eventfd2(0x400, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r10, 0x5, 0x2, r10}) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r9, 0x5, 0x2, r9})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000))

9m40.496246733s ago: executing program 37 (id=483):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a67000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100032, &(0x7f0000000040)=0x40})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

1m9.648285457s ago: executing program 6 (id=484):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x58)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0)

49.166268759s ago: executing program 7 (id=485):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x3000003, 0x1010, r2, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

21.274651651s ago: executing program 38 (id=484):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x58)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0)

0s ago: executing program 39 (id=485):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x3000003, 0x1010, r2, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

kernel console output (not intermixed with test programs):

[  407.221099][   T25] audit: type=1400 audit(406.430:60): avc:  denied  { read } for  pid=3171 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  424.309380][ T3171] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.103417][ T3171] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:26595' (ED25519) to the list of known hosts.
[  649.254662][   T25] audit: type=1400 audit(648.480:61): avc:  denied  { name_bind } for  pid=3341 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  650.478765][   T25] audit: type=1400 audit(649.710:62): avc:  denied  { execute } for  pid=3342 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  650.507167][   T25] audit: type=1400 audit(649.740:63): avc:  denied  { execute_no_trans } for  pid=3342 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  674.315641][   T25] audit: type=1400 audit(673.550:64): avc:  denied  { mounton } for  pid=3342 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  674.363176][   T25] audit: type=1400 audit(673.590:65): avc:  denied  { mount } for  pid=3342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  674.451151][ T3342] cgroup: Unknown subsys name 'net'
[  674.525309][   T25] audit: type=1400 audit(673.760:66): avc:  denied  { unmount } for  pid=3342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  675.022155][ T3342] cgroup: Unknown subsys name 'cpuset'
[  675.144934][ T3342] cgroup: Unknown subsys name 'rlimit'
[  676.117801][   T25] audit: type=1400 audit(675.350:67): avc:  denied  { setattr } for  pid=3342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  676.137785][   T25] audit: type=1400 audit(675.370:68): avc:  denied  { mounton } for  pid=3342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  676.165921][   T25] audit: type=1400 audit(675.400:69): avc:  denied  { mount } for  pid=3342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  677.244973][ T3345] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  677.269258][   T25] audit: type=1400 audit(676.500:70): avc:  denied  { relabelto } for  pid=3345 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  677.296997][   T25] audit: type=1400 audit(676.530:71): avc:  denied  { write } for  pid=3345 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  677.504023][   T25] audit: type=1400 audit(676.730:72): avc:  denied  { read } for  pid=3342 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  677.522510][   T25] audit: type=1400 audit(676.750:73): avc:  denied  { open } for  pid=3342 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  677.567523][ T3342] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  736.375171][   T25] audit: type=1400 audit(735.610:74): avc:  denied  { execmem } for  pid=3346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  740.316957][   T25] audit: type=1400 audit(739.530:75): avc:  denied  { read } for  pid=3349 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  740.353105][   T25] audit: type=1400 audit(739.540:76): avc:  denied  { open } for  pid=3348 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  740.412571][   T25] audit: type=1400 audit(739.630:77): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  740.638890][   T25] audit: type=1400 audit(739.870:78): avc:  denied  { module_request } for  pid=3348 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  740.680792][   T25] audit: type=1400 audit(739.910:79): avc:  denied  { module_request } for  pid=3349 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  741.773369][   T25] audit: type=1400 audit(741.000:80): avc:  denied  { sys_module } for  pid=3348 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  769.992364][ T3349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  770.263628][ T3349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  770.326766][ T3348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.012053][ T3348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.132648][ T3349] hsr_slave_0: entered promiscuous mode
[  783.163248][ T3349] hsr_slave_1: entered promiscuous mode
[  784.436894][ T3348] hsr_slave_0: entered promiscuous mode
[  784.492159][ T3348] hsr_slave_1: entered promiscuous mode
[  784.522232][ T3348] debugfs: 'hsr0' already exists in 'hsr'
[  784.526385][ T3348] Cannot create hsr debugfs directory
[  790.422963][   T25] audit: type=1400 audit(789.650:81): avc:  denied  { create } for  pid=3349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  790.476855][   T25] audit: type=1400 audit(789.710:82): avc:  denied  { write } for  pid=3349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  790.544305][   T25] audit: type=1400 audit(789.780:83): avc:  denied  { read } for  pid=3349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  790.682782][ T3349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  790.979458][ T3349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  791.337611][ T3349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  791.761692][ T3349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  793.417102][ T3348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  793.619102][ T3348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  793.803527][ T3348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  793.993740][ T3348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  806.688527][ T3349] 8021q: adding VLAN 0 to HW filter on device bond0
[  809.292615][ T3348] 8021q: adding VLAN 0 to HW filter on device bond0
[  865.618904][ T3349] veth0_vlan: entered promiscuous mode
[  866.082729][ T3349] veth1_vlan: entered promiscuous mode
[  869.126162][ T3349] veth0_macvtap: entered promiscuous mode
[  869.982336][ T3348] veth0_vlan: entered promiscuous mode
[  870.055689][ T3349] veth1_macvtap: entered promiscuous mode
[  871.446058][ T3348] veth1_vlan: entered promiscuous mode
[  873.993624][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.025908][ T3440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.035815][ T3440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.062683][ T3440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  876.355716][ T3348] veth0_macvtap: entered promiscuous mode
[  877.243824][ T3348] veth1_macvtap: entered promiscuous mode
[  878.172077][   T25] audit: type=1400 audit(877.370:84): avc:  denied  { mount } for  pid=3349 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  878.551307][   T25] audit: type=1400 audit(877.780:85): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/syzkaller.eVtMD3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  878.987304][   T25] audit: type=1400 audit(878.220:86): avc:  denied  { mount } for  pid=3349 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  879.611538][   T25] audit: type=1400 audit(878.740:87): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/syzkaller.eVtMD3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  879.893033][   T25] audit: type=1400 audit(879.080:88): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/syzkaller.eVtMD3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  881.234235][   T25] audit: type=1400 audit(880.440:89): avc:  denied  { unmount } for  pid=3349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  881.643972][ T3362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.697140][ T3362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  881.715199][ T3362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  881.778587][ T3440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  881.933841][   T25] audit: type=1400 audit(881.160:90): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  882.166838][   T25] audit: type=1400 audit(881.400:91): avc:  denied  { mount } for  pid=3349 comm="syz-executor" name="/" dev="gadgetfs" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  882.934055][   T25] audit: type=1400 audit(882.160:92): avc:  denied  { mount } for  pid=3349 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  883.142383][   T25] audit: type=1400 audit(882.340:93): avc:  denied  { mounton } for  pid=3349 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  883.264437][   T25] audit: type=1400 audit(882.370:94): avc:  denied  { mount } for  pid=3349 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  885.577019][ T3349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  887.244703][   T25] audit: type=1400 audit(886.440:95): avc:  denied  { read write } for  pid=3349 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  887.277663][   T25] audit: type=1400 audit(886.510:96): avc:  denied  { open } for  pid=3349 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  887.351900][   T25] audit: type=1400 audit(886.580:97): avc:  denied  { ioctl } for  pid=3349 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  899.562186][   T25] audit: type=1400 audit(898.790:98): avc:  denied  { read } for  pid=3506 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  899.698751][   T25] audit: type=1400 audit(898.920:99): avc:  denied  { open } for  pid=3506 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  899.981216][   T25] audit: type=1400 audit(899.210:100): avc:  denied  { ioctl } for  pid=3506 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  912.216646][   T25] audit: type=1400 audit(911.410:101): avc:  denied  { write } for  pid=3518 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  931.417690][   T25] audit: type=1400 audit(930.590:102): avc:  denied  { append } for  pid=3533 comm="syz.1.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  944.865581][   T25] audit: type=1400 audit(943.970:103): avc:  denied  { execute } for  pid=3538 comm="syz.1.9" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1117.267421][   T25] audit: type=1400 audit(1116.450:104): avc:  denied  { create } for  pid=3634 comm="syz.1.39" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1118.751950][   T25] audit: type=1400 audit(1117.860:105): avc:  denied  { map } for  pid=3634 comm="syz.1.39" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1118.777249][   T25] audit: type=1400 audit(1118.000:106): avc:  denied  { read } for  pid=3634 comm="syz.1.39" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1232.387463][ T3703] KVM: debugfs: duplicate directory 3703-9
[ 1232.708903][ T3703] KVM: debugfs: duplicate directory 3703-9
[ 1266.930671][   T25] audit: type=1400 audit(1266.150:107): avc:  denied  { map } for  pid=3722 comm="syz.1.65" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1843.611174][   T25] audit: type=1400 audit(1842.840:108): avc:  denied  { setattr } for  pid=4053 comm="syz.0.172" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1950.163336][   T25] audit: type=1400 audit(1949.390:109): avc:  denied  { write } for  pid=4121 comm="syz.1.195" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2129.209168][   T25] audit: type=1400 audit(2128.440:110): avc:  denied  { ioctl } for  pid=4236 comm="syz.0.231" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=15106 ioctlcmd=0xaeae scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 2469.107611][ T4439] kvm [4439]: Failed to find VMA for hva 0x20c01000
[ 2488.284581][ T4454] kvm [4454]: Failed to find VMA for hva 0x21016000
[ 2488.525267][ T4454] kvm [4454]: Failed to find VMA for hva 0x21016000
[ 2550.296419][ T4485] kvm [4484]: Unsupported guest access at: eeef0000
[ 2550.296419][ T4485]  { Op0( 2), Op1( 7), CRn(15), CRm(12), Op2( 7), func_read },
[ 2720.913720][   T25] audit: type=1400 audit(2720.100:111): avc:  denied  { map } for  pid=4592 comm="syz.0.341" path="pipe:[2762]" dev="pipefs" ino=2762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2720.942385][   T25] audit: type=1400 audit(2720.170:112): avc:  denied  { execute } for  pid=4592 comm="syz.0.341" path="pipe:[2762]" dev="pipefs" ino=2762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2918.384316][   T25] audit: type=1400 audit(2917.580:113): avc:  denied  { ioctl } for  pid=4685 comm="syz.0.368" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2972.468549][ T4721] FAULT_INJECTION: forcing a failure.
[ 2972.468549][ T4721] name failslab, interval 1, probability 0, space 0, times 1
[ 2972.503013][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz.1.378 Not tainted syzkaller #0 PREEMPT 
[ 2972.503688][ T4721] Hardware name: linux,dummy-virt (DT)
[ 2972.504138][ T4721] Call trace:
[ 2972.504546][ T4721]  show_stack+0x2c/0x3c (C)
[ 2972.506400][ T4721]  __dump_stack+0x30/0x40
[ 2972.506802][ T4721]  dump_stack_lvl+0xd8/0x12c
[ 2972.507124][ T4721]  dump_stack+0x1c/0x28
[ 2972.507446][ T4721]  should_fail_ex+0x56c/0x6d8
[ 2972.507665][ T4721]  should_failslab+0xb8/0xec
[ 2972.507937][ T4721]  kmem_cache_alloc_noprof+0x90/0x5b4
[ 2972.508177][ T4721]  mas_alloc_nodes+0x350/0x3b8
[ 2972.508450][ T4721]  mas_preallocate+0x4ec/0x958
[ 2972.508694][ T4721]  __split_vma+0x318/0xb08
[ 2972.508917][ T4721]  vms_gather_munmap_vmas+0x4d0/0x1478
[ 2972.509133][ T4721]  mmap_region+0x6f0/0x1bdc
[ 2972.509373][ T4721]  do_mmap+0xa50/0xf50
[ 2972.509661][ T4721]  vm_mmap_pgoff+0x288/0x3dc
[ 2972.509941][ T4721]  ksys_mmap_pgoff+0x3a4/0x448
[ 2972.510228][ T4721]  __arm64_sys_mmap+0x13c/0x198
[ 2972.510590][ T4721]  invoke_syscall+0x90/0x230
[ 2972.510884][ T4721]  el0_svc_common+0x120/0x2f4
[ 2972.511163][ T4721]  do_el0_svc+0x58/0x74
[ 2972.511462][ T4721]  el0_svc+0x5c/0x238
[ 2972.511750][ T4721]  el0t_64_sync_handler+0x84/0x12c
[ 2972.512036][ T4721]  el0t_64_sync+0x198/0x19c
[ 3334.927290][ T4872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3335.654720][ T4872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3335.796365][ T4874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3337.385047][ T4874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3364.011176][ T4872] hsr_slave_0: entered promiscuous mode
[ 3364.065238][ T4872] hsr_slave_1: entered promiscuous mode
[ 3364.111613][ T4872] debugfs: 'hsr0' already exists in 'hsr'
[ 3364.114716][ T4872] Cannot create hsr debugfs directory
[ 3367.613928][ T4874] hsr_slave_0: entered promiscuous mode
[ 3367.687206][ T4874] hsr_slave_1: entered promiscuous mode
[ 3367.791905][ T4874] debugfs: 'hsr0' already exists in 'hsr'
[ 3367.794944][ T4874] Cannot create hsr debugfs directory
[ 3386.585543][ T4872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3387.336566][ T4872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3389.372074][ T4872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3391.506158][ T4872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3393.037743][ T4923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3393.857187][ T4923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3394.709181][ T4923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3395.598357][ T4923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3397.446965][ T4874] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3397.923488][ T4874] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3398.295769][ T4874] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3398.893552][ T4874] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3416.882995][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3417.377152][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3417.606134][ T4923] bond0 (unregistering): Released all slaves
[ 3420.312198][ T4923] hsr_slave_0: left promiscuous mode
[ 3420.431927][ T4923] hsr_slave_1: left promiscuous mode
[ 3421.531687][ T4923] veth1_macvtap: left promiscuous mode
[ 3421.533801][ T4923] veth0_macvtap: left promiscuous mode
[ 3421.592407][ T4923] veth1_vlan: left promiscuous mode
[ 3421.609241][ T4923] veth0_vlan: left promiscuous mode
[ 3455.057768][ T4923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3456.555596][ T4923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3457.873618][ T4923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3458.889455][ T4923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3479.420876][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3480.207378][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3480.523124][ T4923] bond0 (unregistering): Released all slaves
[ 3482.714913][ T4923] hsr_slave_0: left promiscuous mode
[ 3482.783896][ T4923] hsr_slave_1: left promiscuous mode
[ 3483.161185][ T4923] veth1_macvtap: left promiscuous mode
[ 3483.164646][ T4923] veth0_macvtap: left promiscuous mode
[ 3483.173339][ T4923] veth1_vlan: left promiscuous mode
[ 3483.190334][ T4923] veth0_vlan: left promiscuous mode
[ 3503.996085][ T4872] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3505.177312][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3601.175896][ T4874] veth0_vlan: entered promiscuous mode
[ 3602.612779][ T4872] veth0_vlan: entered promiscuous mode
[ 3603.536098][ T4874] veth1_vlan: entered promiscuous mode
[ 3604.928081][ T4872] veth1_vlan: entered promiscuous mode
[ 3609.103694][ T4874] veth0_macvtap: entered promiscuous mode
[ 3610.213493][ T4874] veth1_macvtap: entered promiscuous mode
[ 3610.726193][ T4872] veth0_macvtap: entered promiscuous mode
[ 3611.834161][ T4872] veth1_macvtap: entered promiscuous mode
[ 3615.707374][ T4970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3615.715335][ T4970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3615.772331][ T4599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3615.832727][ T4225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3617.527151][ T4613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3617.528346][ T4613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3617.554769][ T4970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3617.604617][ T4923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3623.304541][   T25] audit: type=1400 audit(3622.530:114): avc:  denied  { unmount } for  pid=4874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 3934.016622][ T4970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3935.545176][ T4970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3937.295527][ T4970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3939.189086][ T4970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3964.692102][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3965.009389][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3965.235100][ T4970] bond0 (unregistering): Released all slaves
[ 3968.452501][ T4970] hsr_slave_0: left promiscuous mode
[ 3968.940532][ T4970] hsr_slave_1: left promiscuous mode
[ 3970.373475][ T4970] veth1_macvtap: left promiscuous mode
[ 3970.384728][ T4970] veth0_macvtap: left promiscuous mode
[ 3970.412581][ T4970] veth1_vlan: left promiscuous mode
[ 3970.452720][ T4970] veth0_vlan: left promiscuous mode
[ 3999.389206][ T4970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4001.511637][ T4970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4002.843575][ T4970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4004.206356][ T4970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4024.732150][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4025.064970][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4025.264877][ T4970] bond0 (unregistering): Released all slaves
[ 4027.205821][ T4970] hsr_slave_0: left promiscuous mode
[ 4027.251759][ T4970] hsr_slave_1: left promiscuous mode
[ 4027.604138][ T4970] veth1_macvtap: left promiscuous mode
[ 4027.607984][ T4970] veth0_macvtap: left promiscuous mode
[ 4027.645840][ T4970] veth1_vlan: left promiscuous mode
[ 4027.661689][ T4970] veth0_vlan: left promiscuous mode
[ 4083.953932][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4084.255796][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4088.559337][ T5259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4088.935065][ T5259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4110.668805][ T5263] hsr_slave_0: entered promiscuous mode
[ 4110.735324][ T5263] hsr_slave_1: entered promiscuous mode
[ 4114.726373][ T5259] hsr_slave_0: entered promiscuous mode
[ 4114.798294][ T5259] hsr_slave_1: entered promiscuous mode
[ 4114.835831][ T5259] debugfs: 'hsr0' already exists in 'hsr'
[ 4114.871341][ T5259] Cannot create hsr debugfs directory
[ 4128.684164][ T5263] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4129.594096][ T5263] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4130.337699][ T5263] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4132.026120][ T5263] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4137.495713][ T5259] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 4138.084825][ T5259] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 4138.762436][ T5259] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 4139.343363][ T5259] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 4168.649341][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4173.817707][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4308.978819][ T5263] veth0_vlan: entered promiscuous mode
[ 4310.413159][ T5263] veth1_vlan: entered promiscuous mode
[ 4315.652285][ T5263] veth0_macvtap: entered promiscuous mode
[ 4316.742663][ T5259] veth0_vlan: entered promiscuous mode
[ 4317.016603][ T5263] veth1_macvtap: entered promiscuous mode
[ 4319.696981][ T5259] veth1_vlan: entered promiscuous mode
[ 4324.487439][ T5270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4324.489004][ T5270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4324.647871][ T4613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4324.671529][ T4613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4327.928675][ T5259] veth0_macvtap: entered promiscuous mode
[ 4329.656920][ T5259] veth1_macvtap: entered promiscuous mode
[ 4336.413323][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4336.503964][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4336.524116][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4336.592050][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4769.087110][ T5669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4771.479105][ T5669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4794.093324][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4796.261877][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4826.994626][ T5669] hsr_slave_0: entered promiscuous mode
[ 4827.077407][ T5669] hsr_slave_1: entered promiscuous mode
[ 4827.201340][ T5669] debugfs: 'hsr0' already exists in 'hsr'
[ 4827.205666][ T5669] Cannot create hsr debugfs directory
[ 4857.798157][ T5681] hsr_slave_0: entered promiscuous mode
[ 4858.046733][ T5681] hsr_slave_1: entered promiscuous mode
[ 4858.252950][ T5681] debugfs: 'hsr0' already exists in 'hsr'
[ 4858.262662][ T5681] Cannot create hsr debugfs directory
[ 4866.653574][ T5669] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4867.435273][ T5669] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4870.059400][ T5669] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4871.727882][ T5669] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4898.686850][ T5681] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 4899.505362][ T5681] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 4900.356963][ T5681] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 4901.182472][ T5681] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 4930.537062][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4948.556257][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5130.645608][ T5669] veth0_vlan: entered promiscuous mode
[ 5132.670183][ T5669] veth1_vlan: entered promiscuous mode
[ 5138.082554][ T5669] veth0_macvtap: entered promiscuous mode
[ 5139.106074][ T5669] veth1_macvtap: entered promiscuous mode
[ 5144.652897][ T5264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5144.703697][ T4887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5144.853387][ T4887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5145.210634][ T4887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5151.469041][ T5681] veth0_vlan: entered promiscuous mode
[ 5154.452547][ T5681] veth1_vlan: entered promiscuous mode
[ 5161.296737][ T5681] veth0_macvtap: entered promiscuous mode
[ 5162.463902][ T5681] veth1_macvtap: entered promiscuous mode
[ 5169.081593][ T4225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5169.201771][ T4225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5169.394163][ T4225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5169.626336][ T5688] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5241.005174][   T27] INFO: task syz.4.481:5646 blocked for more than 430 seconds.
[ 5241.021048][   T27]       Not tainted syzkaller #0
[ 5241.024781][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 5241.025433][   T27] task:syz.4.481       state:D stack:0     pid:5646  tgid:5646  ppid:5259   task_flags:0x400040 flags:0x00000011
[ 5241.026668][   T27] Call trace:
[ 5241.027074][   T27]  __switch_to+0x584/0xb00 (T)
[ 5241.027686][   T27]  __schedule+0x200c/0x3428
[ 5241.028143][   T27]  schedule+0xac/0x27c
[ 5241.028615][   T27]  schedule_timeout+0x68/0x1ec
[ 5241.029098][   T27]  do_wait_for_common+0x28c/0x440
[ 5241.154004][   T27]  wait_for_completion+0x44/0x5c
[ 5241.165384][   T27]  __synchronize_srcu+0x2a4/0x320
[ 5241.166144][   T27]  synchronize_srcu+0x3d0/0x4f8
[ 5241.166719][   T27]  mmu_notifier_unregister+0x320/0x428
[ 5241.167261][   T27]  kvm_put_kvm+0x698/0xbe0
[ 5241.167694][   T27]  kvm_vm_release+0x58/0x78
[ 5241.168140][   T27]  __fput+0x4ac/0x978
[ 5241.168585][   T27]  ____fput+0x20/0x58
[ 5241.169001][   T27]  task_work_run+0x1b8/0x250
[ 5241.169465][   T27]  exit_to_user_mode_loop+0x110/0x188
[ 5241.232837][   T27]  el0_svc+0x17c/0x238
[ 5241.255984][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 5241.256750][   T27]  el0t_64_sync+0x198/0x19c
[ 5241.258309][   T27] 
[ 5241.258309][   T27] Showing all locks held in the system:
[ 5241.258849][   T27] 1 lock held by khungtaskd/27:
[ 5241.259262][   T27]  #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 5241.384248][   T27] 1 lock held by syslogd/3130:
[ 5241.384706][   T27] 2 locks held by getty/3200:
[ 5241.385055][   T27]  #0: 21f00000123628a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 5241.387441][   T27]  #1: b7ff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 5241.389238][   T27] 3 locks held by kworker/u4:5/3793:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 5241.518116][   T27] 2 locks held by kworker/0:5/3981:
[ 5241.523911][   T27] 3 locks held by kworker/u4:7/4613:
[ 5241.524443][   T27] 3 locks held by kworker/u4:4/4887:
[ 5241.524808][   T27] 2 locks held by kworker/u4:11/4970:
[ 5241.525123][   T27]  #0: c1f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10
[ 5241.527305][   T27]  #1: ffff80008e5c7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10
[ 5241.529025][   T27] 2 locks held by kworker/0:3/5510:
[ 5241.529372][   T27] 4 locks held by kworker/0:6/5513:
[ 5241.671711][   T27]  #0: fff0000072d59ed8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x368/0x3428
[ 5241.712743][   T27]  #1: fff0000072d45588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
[ 5241.714468][   T27]  #2: fff0000072d46e98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5c8/0xe7c
[ 5241.716271][   T27]  #3: ffff80008c61ede8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x7c/0x548
[ 5241.717996][   T27] 2 locks held by syz.5.483/5656:
[ 5241.718402][   T27] 3 locks held by kworker/u4:15/5823:
[ 5241.718784][   T27] 2 locks held by syz-executor/5892:
[ 5241.719106][   T27] 4 locks held by modprobe/5893:
[ 5241.890684][   T27] 
[ 5241.892740][   T27] =============================================
[ 5241.892740][   T27] 
[ 5241.897321][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 5241.901455][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 5241.902638][   T27] Hardware name: linux,dummy-virt (DT)
[ 5241.903474][   T27] Call trace:
[ 5241.904118][   T27]  show_stack+0x2c/0x3c (C)
[ 5241.905073][   T27]  __dump_stack+0x30/0x40
[ 5241.905995][   T27]  dump_stack_lvl+0x30/0x12c
[ 5241.906912][   T27]  dump_stack+0x1c/0x28
[ 5241.907763][   T27]  vpanic+0x1d4/0x4e4
[ 5241.908564][   T27]  vpanic+0x0/0x4e4
[ 5241.909353][   T27]  hung_task_panic+0x0/0x2c
[ 5241.910171][   T27]  kthread+0x794/0x99c
[ 5241.911038][   T27]  ret_from_fork+0x10/0x20
[ 5241.912857][   T27] Kernel Offset: disabled
[ 5241.913569][   T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 5241.914614][   T27] Memory Limit: none
[ 5241.916782][   T27] Rebooting in 86400 seconds..