last executing test programs:

52m30.653184063s ago: executing program 0 (id=248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) (async)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r4 = openat$kvm(0x0, &(0x7f0000000000), 0x80402, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r6, 0x0)
r12 = eventfd2(0x0, 0x0)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
r13 = eventfd2(0x0, 0x0)
close(r13) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r13, 0x0) (async, rerun: 32)
write$eventfd(r12, &(0x7f0000000180)=0xa19, 0x8)
mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r3, 0x3, 0x13, r1, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000140), 0x288280, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)

52m19.366124884s ago: executing program 0 (id=250):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x1000, 0x1000, &(0x7f0000275000/0x1000)=nil})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000b7b000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x8, 0x80800)
r5 = eventfd2(0x8, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x25000, 0x0, r5, 0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x8000000000000002, 0x0, 0x2, r4, 0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r4, 0x3})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x6d41f9db1264a566, &(0x7f0000000100)=0x11})
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000003, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

51m59.737053401s ago: executing program 0 (id=253):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_CAP_ARM_USER_IRQ(r0, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000080)={0x2, 0xa4})
ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7f, 0x8}}) (async)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000000140)={0xe4, 0x0, 0x8000000000000000}) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x80ec000, 0x16000, 0x1})
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x84000000, [0x1ff, 0x5, 0x100, 0xff, 0x100]}}, @irq_setup={0x46, 0x18, {0x0, 0x37a}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x3, 0x1a2}}, @irq_setup={0x46, 0x18, {0x3, 0x104}}, @mrs={0xbe, 0x18, {0x6e8a}}, @uexit={0x0, 0x18, 0x1000}, @msr={0x14, 0x20, {0x603000000013e005, 0x1}}, @smc={0x1e, 0x40, {0x40, [0xfffffffffffff4d8, 0x5, 0x200, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x80000001, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x4, 0xb, 0x3ff, 0x7f, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x3, 0x4}}, @uexit={0x0, 0x18, 0x55}, @code={0xa, 0x9c, {"000008d5a0bb86d20000b8f2410080d2020180d2430080d2240080d2020000d4007008d5007008d5000028d5601588d20040b8f2a10080d2020080d2230180d2040180d2020000d4007008d500aa9ad20060b8f2a10080d2c20180d2a30180d2240180d2020000d4e0ad8ed200c0b8f2410080d2420080d2030080d2440180d2020000d4007c0013"}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x8c}}, @eret={0xe6, 0x18, 0x552}, @eret={0xe6, 0x18, 0xf}, @code={0xa, 0x6c, {"007008d5000840f8008008d500849f0de0ad96d20020b0f2a10180d2c20180d2c30180d2040180d2020000d41004201e006293d20040b0f2410080d2a20180d2030180d2640080d2020000d4007008d5007008d5007008d5"}}, @mrs={0xbe, 0x18, {0x603000000013c645}}, @memwrite={0x6e, 0x30, @generic={0x105fff, 0xf09, 0x7, 0xa}}, @mrs={0xbe, 0x18, {0x603000000013c642}}, @code={0xa, 0x54, {"a0639cd20000b0f2e10180d2620180d2830080d2240180d2020000d4000008d5007008d5000008d5007008d5007008d50088201e007008d5007008d5007008d5"}}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0xa}, @irq_setup={0x46, 0x18, {0x0, 0x3c}}, @msr={0x14, 0x20, {0x603000000013c00f, 0x6}}, @msr={0x14, 0x20, {0x603000000013e000, 0x2}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x1f7}}, @mrs={0xbe, 0x18, {0x603000000013c010}}], 0x4ac}, &(0x7f0000000700)=[@featur1={0x1, 0xec}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) (async, rerun: 64)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000800)=[{0x0, &(0x7f0000000740)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff0, 0x8000000000000000}}, @uexit={0x0, 0x18, 0x6}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x4, 0x3ff, 0x7}}, @uexit={0x0, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013dee2}}, @irq_setup={0x46, 0x18, {0x2, 0x3d}}], 0xb8}], 0x1, 0x0, &(0x7f0000000840)=[@featur2={0x1, 0x10}], 0x1) (async, rerun: 64)
r5 = eventfd2(0x9, 0x0) (rerun: 64)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000880)={0x4, 0xeeef0000, 0x4, r5, 0x4}) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000008c0)={0x1ff, 0x3, 0x50000, 0x2000, &(0x7f0000fca000/0x2000)=nil}) (async, rerun: 32)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f0000000900)={0xffffffff80000000, 0x5}) (async)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000940)={0x7, 0x7})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0xd89b00, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xffffffffffffff00) (async)
r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000c00)={0x0, &(0x7f00000009c0)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x3, 0x6, 0x0, 0x4}}, @svc={0x122, 0x40, {0xc4000005, [0xf, 0xfffffffffffffff0, 0x80000001, 0x120000000, 0x5]}}, @smc={0x1e, 0x40, {0x8400000b, [0x43e2, 0x6, 0x3, 0x7fffffff, 0x90000]}}, @memwrite={0x6e, 0x30, @generic={0xeeef0000, 0x1d5, 0x0, 0x6}}, @eret={0xe6, 0x18, 0xffffffffffffffff}, @svc={0x122, 0x40, {0x80000000, [0x650, 0x9, 0x8, 0xfffffffffffffb08, 0x81]}}, @hvc={0x32, 0x40, {0x8400000c, [0x4, 0x8, 0x10, 0xd, 0x1d2]}}, @smc={0x1e, 0x40, {0xc4000001, [0x3, 0x4, 0x1, 0x80000001, 0x2]}}, @code={0xa, 0x84, {"007008d5000008d5008c004f000000ea000008d50020c09a207b9bd20040b8f2e10180d2e20080d2c30080d2040080d2020000d4e0e68bd20040b8f2010080d2e20180d2430180d2240080d2020000d4c09c98d20020b8f2c10080d2220080d2430180d2e40080d2020000d400000008"}}], 0x234}, &(0x7f0000000c40)=[@featur1={0x1, 0x17}], 0x1)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async)
r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001240)={0x0, &(0x7f0000000c80)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x0, 0xb, 0x80000000, 0x5, 0x2}}, @eret={0xe6, 0x18, 0xe1}, @code={0xa, 0x54, {"007008d5007008d50040c00d806b99d20020b0f2810180d2820080d2030080d2040080d2020000d4007008d50060200e007008d5000008d5007008d50000189e"}}, @svc={0x122, 0x40, {0x0, [0x19, 0x101, 0x4, 0x0, 0x8]}}, @hvc={0x32, 0x40, {0x84000050, [0xffffffffffffff06, 0xfffffffffffffffb, 0x6d0, 0x8, 0x8]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x310}}, @msr={0x14, 0x20, {0x603000000013deaa, 0xa}}, @memwrite={0x6e, 0x30, @generic={0x0, 0xe56, 0x6, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x3}}, @irq_setup={0x46, 0x18, {0x1, 0x132}}, @smc={0x1e, 0x40, {0x80000001, [0x3, 0x80000000, 0x8000000000000001, 0x1, 0x4]}}, @svc={0x122, 0x40, {0x84000006, [0x0, 0x2, 0x4, 0x3850, 0x401]}}, @eret={0xe6, 0x18, 0x9}, @irq_setup={0x46, 0x18, {0x0, 0x3bd}}, @mrs={0xbe, 0x18, {0x603000000013c2a9}}, @code={0xa, 0x6c, {"007008d5008008d5007008d5000008d5e0fd8bd20000b0f2210180d2020180d2c30080d2240180d2020000d40084007f0020006f0028216e000008d5c08796d20080b8f2610080d2220080d2a30180d2640080d2020000d4"}}, @svc={0x122, 0x40, {0x84000011, [0x4, 0x3, 0x8, 0x4, 0xfffffffffffffff9]}}, @mrs={0xbe, 0x18, {0x603000000013e6d9}}, @smc={0x1e, 0x40, {0x8d3d6a75f27dae2f, [0x7, 0x6, 0x200, 0x7, 0x29e0]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x2aa}}, @uexit={0x0, 0x18, 0x40}, @mrs={0xbe, 0x18, {0x603000000013e288}}, @msr={0x14, 0x20, {0x603000000013c529, 0xef04}}, @uexit={0x0, 0x18, 0x3}, @smc={0x1e, 0x40, {0x80003fff, [0xfffffffffffffff7, 0xc, 0x2e7, 0x1, 0x5]}}, @code={0xa, 0xcc, {"008008d5004984d200e0b0f2210180d2420080d2c30180d2e40080d2020000d420fd89d20020b8f2810080d2820180d2630080d2440180d2020000d4007008d5407395d200c0b8f2010180d2220180d2e30180d2440180d2020000d420168dd200e0b0f2010080d2c20080d2230180d2040180d2020000d4409c86d20060b8f2210080d2820080d2030080d2a40180d2020000d4208d86d200a0b8f2c10180d2620180d2030180d2840080d2020000d4008008d5007008d5"}}, @hvc={0x32, 0x40, {0x1000, [0x7, 0x7ff, 0x1000, 0x5, 0x386b]}}, @uexit={0x0, 0x18, 0x5}], 0x594}, &(0x7f0000001280)=[@featur1={0x1, 0x6e}], 0x1)
mmap$KVM_VCPU(&(0x7f0000d05000/0x1000)=nil, r9, 0x1, 0x4000010, r10, 0x0)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000001300)=@arm64_sve={0x6080000000150231, &(0x7f00000012c0)=0x10001}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001340)={0x10003, 0x0, 0x3000, 0x2000, &(0x7f0000da6000/0x2000)=nil})
ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000001380)={0x9, 0xb506}) (async)
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000013c0)={0x7})
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000001800)={0x2710, 0x40, 0x280, &(0x7f0000001400)=[0x0, 0xc905, 0x10, 0xfffffffeffffffff, 0x2, 0x9, 0xd2, 0x100000000, 0x9, 0x81, 0x6, 0x92, 0x1, 0x9, 0x0, 0x2, 0xc000000000, 0x2, 0x9, 0x0, 0x0, 0x2, 0xe66, 0x5, 0x4, 0x100000001, 0x3, 0x8000000000000001, 0x0, 0x10001, 0x9, 0x8, 0x8000000000000001, 0x10000, 0x10, 0x10, 0x3ff, 0x10, 0x0, 0x1000, 0x4ce9, 0x0, 0x2a, 0x1ff, 0x3, 0x8, 0x10, 0x439, 0xd, 0x3, 0x9, 0x7fd46d63, 0x1000, 0x80, 0x6, 0x4e6, 0x5, 0x80, 0x9, 0x6, 0xffffffff, 0xb1a2, 0xffffffff00000000, 0x7, 0x1, 0x101, 0x8, 0x4, 0xca, 0x4, 0x8, 0xa3, 0x100000001, 0x9, 0xa, 0xe3b, 0x9, 0x5, 0x9, 0x7, 0x0, 0x8000000000000001, 0x8000, 0x100000000, 0x8, 0x3, 0x8, 0x7, 0x8, 0x100000001, 0x2, 0x101, 0x1, 0x9, 0x72fc, 0x8, 0x81, 0x101, 0x8, 0x5, 0x6, 0x5, 0xd, 0xfff, 0x101, 0x7, 0x3, 0x6, 0x400, 0x2, 0xffffffff80000000, 0x5, 0x4, 0x4f, 0x0, 0xffffffff, 0x8, 0x5, 0x1, 0xb19, 0x2, 0x80000001, 0x9, 0xf5, 0xde9, 0xb49, 0x5, 0x93]})

51m59.736814001s ago: executing program 1 (id=254):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, 0xffffffffffffffff})

51m55.048278347s ago: executing program 1 (id=255):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x7, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x3, 0x5, 0x0})
r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x0, 0x1000003, 0x4010, r7, 0x0)

51m54.803572088s ago: executing program 0 (id=256):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0xffffffffffffff66, 0x2, 0xa, 0x10}}, {0x5, 0x3, 0x1, 0x0, @msi={0x7, 0x6, 0x7fffffff, 0x5}}, {0x0, 0x0, 0x1, 0x0, @msi={0x80, 0x0, 0x0, 0xa0}}, {0x0, 0x0, 0x1, 0x0, @adapter={0x5e9, 0x5, 0x401, 0x7f, 0xb2d}}]})
write$eventfd(r7, &(0x7f00000001c0)=0x3, 0x50)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xe, 0x1})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r10, 0x400454e2, 0x110c230020)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f0000000940)={0x1ff, 0x2c0, 0x1c0, &(0x7f0000000540)=[0xfffffffffffffffb, 0x8, 0x8, 0x9, 0x4, 0xffffffffffffff0f, 0x2, 0x100, 0x66c, 0x2, 0x1, 0x8, 0x9, 0x0, 0x9, 0x9, 0x2, 0x7, 0xfffffffffffffff9, 0xa, 0x8001, 0x3, 0xa07, 0x6, 0x2, 0x80000000, 0x0, 0x2, 0x40, 0xe, 0x1, 0xdadb, 0xffffffffffffffff, 0xe59d, 0x9, 0x1000, 0x101, 0x1, 0x3, 0x8000, 0xa, 0xfd, 0xfffffffffffffbff, 0x8000, 0x4, 0x400, 0xfb0, 0x80, 0x2, 0xa, 0x7fffffff, 0x5, 0x2, 0x0, 0x7, 0x8000000000000000, 0x8, 0x1, 0x7fffffff, 0x3, 0x5, 0x3, 0x0, 0x2, 0x1, 0xcf8a, 0x4, 0x4, 0x4, 0x2, 0x9, 0x9, 0x3add, 0x3ab, 0x6, 0x2, 0xc94, 0x2, 0xffffffff, 0x1000, 0x7f, 0x9, 0x0, 0x0, 0x180000000, 0x8000000000000001, 0x84, 0x7, 0x8, 0x7, 0x2000000000000000, 0x5, 0x9, 0x8001, 0x5, 0xa2a8, 0x3, 0x3, 0x5, 0x99, 0x7f, 0x9, 0xe77c, 0x5, 0x7, 0x87d, 0x4, 0xfffffffffffffff9, 0x800, 0x4, 0x0, 0x1, 0x6, 0x2, 0x7, 0x2, 0x3, 0xd95, 0x6, 0x9, 0xffffffff00, 0x3, 0x3, 0x1, 0x7fffffff, 0x9d83, 0xfffffffffffffffd, 0x973]})
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x21)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000100)=0x8})

51m46.947074302s ago: executing program 1 (id=257):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000003)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, 0x0)

51m41.097117676s ago: executing program 1 (id=258):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x84000002, [0xa7, 0x8, 0xbaf9, 0x100]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80c01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x1, 0x7fff})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
close(r2)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x2, 0xa000, 0x1000, &(0x7f0000fef000/0x1000)=nil, 0x401})
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013e108, &(0x7f0000000280)=0x1})

51m35.63454548s ago: executing program 1 (id=259):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x6, &(0x7f0000000000)=0x100000001})
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0x0})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df60, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000600)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x0, 0x2, 0x106}}, @hvc={0x32, 0x40, {0x84000014, [0x8, 0x0, 0x1, 0x3, 0x36]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3d6}}, @uexit={0x0, 0x18, 0xffffffffffffff81}, @smc={0x1e, 0x40, {0x8000, [0x8000000000000001, 0x9e7d, 0x1, 0x100000001, 0x7fffffff]}}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x0, {0x6030000000138074}}, @its_setup={0x82, 0x0, {0x0, 0x2, 0x1de}}, @smc={0x1e, 0x40, {0x84000009, [0x0, 0x9a, 0x9, 0x9, 0x2]}}, @msr={0x14, 0x20, {0x6030000000138066, 0xe}}, @mrs={0xbe, 0x18, {0x603000000013df59}}, @irq_setup={0x46, 0x18, {0x0, 0x2e8}}, @msr={0x14, 0x20, {0x6030000000138006, 0x6}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x8, 0x9, 0x7f, 0x4}}, @smc={0x1e, 0x40, {0xc4000003, [0x4, 0x6, 0x3, 0x6, 0x3]}}, @hvc={0x32, 0x40, {0x84000013, [0x8, 0x4, 0x5670, 0x3]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x12b}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0xfd}}, @irq_setup={0x46, 0x18, {0x1, 0x30e}}], 0x300}, &(0x7f0000000640)=[@featur1={0x1, 0x40}], 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)

51m26.490433512s ago: executing program 0 (id=260):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x24)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0x84000002, [0xa7, 0x8, 0xbaf9, 0x100]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x1, 0x7fff})
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x22200, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)

51m26.017314474s ago: executing program 1 (id=261):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x116000, 0x81})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0xb2, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x3, 0x340) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x435d278e9d37e2af, &(0x7f0000000200)=0x15}) (async)
ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f0000000000)) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
write$eventfd(r11, &(0x7f00000001c0)=0x4000000001, 0x56)

51m18.655034967s ago: executing program 0 (id=262):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9686, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x300000a, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x4000)=nil, 0x930, 0xe, 0x16831, r3, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000011000/0x4000)=nil, r4, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x3, 0x4102932, r3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0xdddd0000, 0x4000})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1, 0x6, 0x1}})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x3000000, 0x11, r5, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
r7 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000000)={0x5})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r9, 0x4004aec2, &(0x7f0000000100)=0x4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000180)={0x2000000000000092, [0x7fff, 0xfa7, 0xff2e, 0xd, 0x9d]})
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)

50m40.106523912s ago: executing program 32 (id=261):
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x116000, 0x81})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0xb2, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x20200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x3, 0x340) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000240)=@attr_irq_timer={0x0, 0x1, 0x435d278e9d37e2af, &(0x7f0000000200)=0x15}) (async)
ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f0000000000)) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
write$eventfd(r11, &(0x7f00000001c0)=0x4000000001, 0x56)

50m32.216851594s ago: executing program 33 (id=262):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9686, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x300000a, 0x11, r3, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x4000)=nil, 0x930, 0xe, 0x16831, r3, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000011000/0x4000)=nil, r4, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x3, 0x4102932, r3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0xdddd0000, 0x4000})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1, 0x6, 0x1}})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x3000000, 0x11, r5, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
r7 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000000)={0x5})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r9, 0x4004aec2, &(0x7f0000000100)=0x4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000180)={0x2000000000000092, [0x7fff, 0xfa7, 0xff2e, 0xd, 0x9d]})
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)

45m18.457332406s ago: executing program 3 (id=266):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000000)={0x5})
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0xd)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffb000/0x4000)=nil})
ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f00000000c0)={{0x60000, 0x6000, 0x10, 0xfb, 0x52, 0x4, 0xd6, 0xd, 0x30, 0x8, 0x0, 0x2}, {0x7000, 0x100000, 0xd, 0x4, 0xed, 0x7, 0x27, 0x9, 0x10, 0x1, 0x6, 0x8}, {0xdddd0000, 0x25000, 0x3, 0xd, 0xa3, 0x10, 0x8, 0x4, 0x1, 0x8, 0x5, 0x10}, {0x52000, 0xeeee8000, 0x0, 0xff, 0x2, 0x1, 0x3, 0x5, 0x0, 0x0, 0x6, 0x81}, {0xffff1000, 0x4000, 0x3, 0xd, 0xd, 0x4, 0xe, 0x1, 0x5, 0x8, 0x81, 0xb}, {0xdddd1000, 0x200000, 0x3, 0x40, 0x76, 0xee, 0x7, 0xc9, 0x2, 0x8, 0x1, 0x1}, {0xfec00000, 0xe000, 0xc, 0xa, 0x0, 0x7, 0x0, 0x8, 0x2, 0x4, 0xd, 0xcd}, {0x50000, 0xddc5c000, 0xe, 0x0, 0x80, 0x3, 0x4, 0x6, 0xf8, 0xb5, 0x8, 0x4}, {0x9000, 0x5}, {0x0, 0xaf9}, 0x40000000, 0x0, 0x6000, 0x4, 0x8, 0x2000, 0xdddc1000, [0x7fffffffffffffff, 0x5, 0xffffffff, 0x20]})
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000200))
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000280)=0x7fffffff)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xcff9)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f00000002c0)={0x7f, 0x3ff, 0x1})
r7 = eventfd2(0x9ca, 0x800)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000300)={0x5, 0x80a0000, 0x0, r7, 0x8})
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000380)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000340)=0x1c})
r9 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
close(r9)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000400)=@riscv64_v={0x8030000009000014, &(0x7f00000003c0)=0xa})
ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000440)={0xb6, 0x0, 0x6})
ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f00000004c0))
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000540)=0x4)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000580)={0x9, 0x9})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000005c0)={0xa})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)

45m6.622946398s ago: executing program 3 (id=268):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r1, 0xfffffffffffffffe, 0xa0)
close(r3)
close(0x4)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000018c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c801}}], 0x48}, 0x0, 0x0) (async)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000018c0)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c801}}], 0x48}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000dc5000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000dc5000/0x2000)=nil, 0x2000)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000fa4000/0x4000)=nil, r10, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000fa4000/0x4000)=nil, r10, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x8400000a, [0x81, 0x7, 0xaca, 0x2, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
close(r4)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
eventfd2(0x8, 0x80800)

45m2.290093956s ago: executing program 2 (id=269):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="85249201b38bc5981f21fe2464a146cd4f2153f48fb36f2ce86552d3830bc5da38e2133b14ac2e5f2811534102722f64385cdd493061d6138c83caf8076eed9d13b934aaf23a9857", 0x0, 0x48)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

44m46.676456601s ago: executing program 3 (id=270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xd, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x4, 0x3, 0xcd, 0x888b, 0x1, 0x6, 0x44, 0x1, 0x3, 0xa3e0, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x80000000, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x4, 0xbbd9, 0x80000000, 0xfffffffffffffbfd, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0xfffffffffffffffe, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0x7, 0x9, 0xff, 0x6, 0x800028000000, 0x5, 0x8061d, 0x0, 0x7, 0xf6, 0x0, 0x6, 0xfffffffffffffffb, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd7, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x824, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x1})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000002, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r7, 0x40000)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f00009ea000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"e0fe8dd20080b8f2410080d2c20080d2030180d2040180d2020000d40008285e0000600d000000b50000601f1020601ec05d87d20040b8f2a10080d2a20180d2030080d2c40180d2020000d4000000b2000028d50060000e"}}, @msr={0x14, 0x20, {0x603000000013e530, 0x401}}, @mrs={0xbe, 0x18, {0x6030000000139f71}}, @irq_setup={0x46, 0x18, {0x0, 0xe}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x277}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x8e}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x362}}], 0x14c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0)

44m43.025561734s ago: executing program 2 (id=271):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033ae3ad2c06009e8babf4e7450400008900000000000000449a7a835673310054ebb2aa760a00d226d6f70ce4884698cba500", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
close(0xffffffffffffffff)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, &(0x7f0000000380)=[@code={0xa, 0xcc, {"0028217ee02799d20040b0f2410080d2a20080d2030180d2040180d2020000d4207694d20020b8f2210180d2620080d2e30180d2440180d2020000d460549bd20000b8f2010080d2820180d2430080d2840180d2020000d4007008d5806990d20040b0f2410080d2a20180d2e30080d2640080d2020000d400d59ed20060b0f2e10180d2e20180d2c30180d2a40080d2020000d4a0749ad200c0b0f2c10180d2a20180d2830180d2240180d2020000d40038000e00044078"}}, @code={0xa, 0xe4, {"c04181d20020b0f2610080d2a20080d2630080d2640180d2020000d4007008d500de8ad20060b0f2c10080d2420180d2830180d2040180d2020000d440ad81d20080b8f2a10080d2220080d2e30080d2c40080d2020000d4007008d5e0e08ad20040b0f2210080d2e20180d2c30180d2640180d2020000d440688cd200a0b8f2610080d2220180d2430180d2e40180d2020000d400f8b07ee07b9fd20020b8f2e10080d2c20080d2030180d2a40180d2020000d4e07f80d20080b8f2210080d2e20180d2230180d2c40080d2020000d4"}}], 0x1b0}, &(0x7f0000000580)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x5})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

44m30.634920373s ago: executing program 2 (id=272):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r3 = eventfd2(0x8801, 0x800)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r9 = eventfd2(0x3ff, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r11, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x4000})
ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r9, 0x5, 0x2, r9})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x200, 0x0, r9})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r3, 0x1, 0x1, r9})

44m19.019035037s ago: executing program 3 (id=273):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c)
ioctl$KVM_CAP_ARM_USER_IRQ(r1, 0x4068aea3, &(0x7f00000001c0))
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x7})
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x0, 0x3, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = eventfd2(0xd, 0x1)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000340)="6203c4d10ed88675f753a11492ed74b6739867e9a19917f924f69be42ef1ba6e7ff680e0fb262fcc8056fdfb45fa5bffecd3689f94e47d72b7a63b552e614fee288d6a3b963e3434", 0x0, 0x48)
write$eventfd(r12, 0x0, 0x500)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
close(r7)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000180)={0x7, 0x2})

44m14.916721225s ago: executing program 2 (id=274):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x603000000013def5}}], 0x18}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}}) (async)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64)

43m57.967110575s ago: executing program 2 (id=275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x183600, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae03, 0x42)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x1, 0x0, 0x0, @msi={0x0, 0xf, 0x9, 0xfffffff9}}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000340)=@arm64_core={0x603000000010001c, &(0x7f00000003c0)=0xffffffff})
openat$kvm(0xffffffffffffff9c, 0x0, 0xac3, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000001300)=[@msr={0x14, 0x20, {0x6030000000130205, 0x6}}, @code={0xa, 0x9c, {"20ec9ad20060b8f2010080d2a20080d2030080d2040180d2020000d4401e8cd20000b8f2e10080d2220180d2e30080d2e40080d2020000d40020600d0004002f000028d5008008d5407e87d20020b0f2a10180d2220080d2a30080d2840080d2020000d40040651e000008d580349dd20000b0f2810080d2a20080d2830080d2440080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0xe, 0xffffff17, 0xcd3, 0x40000004}}, @eret={0xe6, 0x18, 0xfffffffffffffffa}, @hvc={0x32, 0x40, {0x100, [0x6, 0x0, 0xd8, 0x0, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xe, 0x9, 0x10001, 0x4}}, @smc={0x1e, 0x40, {0x84000008, [0x7fffffff, 0x6, 0x1000, 0x440000000000, 0x1]}}, @code={0xa, 0xcc, {"e02e80d200c0b0f2e10180d2620180d2230180d2240080d2020000d400cc9ad20080b0f2e10080d2e20180d2230180d2840180d2020000d400728ad200c0b8f2c10180d2620180d2630180d2240080d2020000d4007008d5403f90d200c0b0f2010080d2820180d2430080d2a40180d2020000d400d8a02e0060000e000028d5206494d200e0b0f2e10080d2820080d2030180d2240080d2020000d4a08b93d200a0b0f2010080d2020080d2a30180d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x8400000f, [0xff, 0xed6b, 0x6, 0x195a, 0x4]}}, @code={0xa, 0xb4, {"000028d5a07895d200c0b8f2a10080d2a20080d2e30180d2040080d2020000d4000040d4c0d88ed20020b8f2610080d2620080d2a30180d2640180d2020000d400ea98d200c0b8f2210180d2220180d2230080d2840180d2020000d460299dd200c0b8f2010180d2e20180d2c30080d2e40080d2020000d420d88ad200e0b0f2810180d2420080d2c30080d2e40080d2020000d4000040f9007008d50064202e"}}, @uexit={0x0, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013df48}}, @irq_setup={0x46, 0x18, {0x0, 0x17f}}, @eret={0xe6, 0x18, 0xb}, @code={0xa, 0x85, {"207f90d20020b8f2e10080d2e20080d2a30180d2e40180d2020000d4008008d5007008d5007008d51820601e0000711e007008d5003f91d20000b0f2610180d2220080d2630180d2c40080d2020000d400e4006fe0b091d20040b0f2410180d2c2049a39d2d20180d2c40080d2020000d4"}}, @smc={0x1e, 0x40, {0x3000000, [0x3, 0x9, 0x5, 0xfffffffffffffa5a, 0x863]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x1cc}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x48, 0x7fffffff, 0x2}}, @msr={0x14, 0x20, {0x603000000013e664, 0xf7}}, @msr={0x14, 0x20, {0x603000000013f100, 0x3}}, @eret={0xe6, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x0, 0x1, 0xfc}}, @uexit={0x0, 0x18, 0x81}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0x8, 0x6, 0x10000, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013c02d}}, @irq_setup={0x46, 0x18, {0x1, 0x12e}}, @code={0xa, 0x84, {"0084000f00849f0d800a91d20060b8f2010180d2e20180d2a30080d2240180d2020000d40008202e000008d5e0dd9dd20040b0f2610080d2020080d2430180d2c40080d2020000d4007008d50090204e608a96d20040b8f2e10080d2220180d2430080d2840180d2020000d400000051"}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x3ca}}, @mrs={0xbe, 0x18, {0x603000000013e719}}, @code={0xa, 0xcc, {"60da9fd200e0b0f2410180d2a20180d2430080d2a40080d2020000d4405c89d20040b0f2e10180d2a20180d2830180d2640080d2020000d400469fd20040b0f2410180d2020080d2630080d2040080d2020000d4008008d5007008d5c0798fd20040b8f2410080d2820080d2630080d2240180d2020000d460149fd20080b8f2c10080d2020080d2630180d2440180d2020000d4001c202e40638dd20020b0f2a10080d2420080d2a30080d2840080d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0x84000004, [0x0, 0x393e, 0x4, 0x5b70000000000, 0x9]}}], 0x7a1}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000200)=0x100000000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x952, 0x7, &(0x7f0000000240)=0x7})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42002, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x27)
ioctl$KVM_CREATE_DEVICE(r12, 0xc0189436, &(0x7f0000000040)={0x4})
close(0x4)
r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)

43m53.101500859s ago: executing program 3 (id=276):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000000)) (async)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000080)=[@code={0xa, 0x9c, {"0000c0da00a8210e008008d5a07589d20020b0f2410080d2c20180d2630080d2c40180d2020000d4007008d500a780d200c0b8f2410080d2020080d2030180d2040080d2020000d420a185d200a0b0f2210080d2e20080d2430080d2440080d2020000d40000600d607b84d20040b8f2410180d2620180d2230080d2240180d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0xc4000010, [0x5cd9, 0x81, 0xc2, 0x2, 0x7]}}, @svc={0x122, 0x40, {0x0, [0x8, 0x2, 0x1, 0xffffffffffffffff, 0x8a]}}, @code={0xa, 0x6c, {"c00680d200a0b0f2010080d2020080d2030080d2040180d2020000d4e0c296d20020b0f2610180d2e20080d2430080d2a40080d2020000d40018285e007008d500dc202e007008d5008040c8007008d50004807800209f0c"}}, @svc={0x122, 0x40, {0x2000000, [0x7, 0x6, 0x3, 0x2, 0x7000]}}], 0x1c8}, &(0x7f00000002c0)=[@featur2={0x1, 0x21}], 0x1)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000300)={0x5, [0x902, 0x352, 0x8001, 0xffff, 0x2]})
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000340)=@arm64) (async)
ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000000380)) (async)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000004c0)=0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bff000/0x400000)=nil) (async)
ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000500)={{0x7000, 0xffff1000, 0x0, 0x0, 0x1, 0x9, 0x39, 0x3, 0x70, 0x8, 0x1e}, {0xb000, 0xffff1000, 0x3, 0x2, 0x32, 0xd, 0x9, 0x3, 0x6, 0x7c, 0xfd, 0x8}, {0x2, 0x26000, 0x8, 0x23, 0x10, 0x2, 0x80, 0x72, 0xb, 0x9, 0xd, 0x2}, {0x8080000, 0xdddd0000, 0x9, 0xb, 0x3, 0x0, 0xa8, 0x8d, 0x3, 0x1, 0x9, 0xc}, {0x54000, 0xeeef0000, 0x3, 0x5, 0x5, 0x81, 0x7, 0xd0, 0x1, 0x80, 0x0, 0xf}, {0xeeef0000, 0xe000, 0xb, 0x8, 0x3, 0x4e, 0x6, 0x3, 0x1, 0xb7, 0x4, 0xee}, {0x41000, 0x1, 0x4, 0x5, 0x7, 0x1, 0x6, 0x7, 0x1, 0x3, 0xf6, 0xb}, {0x4, 0x60000, 0xf, 0x40, 0xff, 0x8, 0x4, 0x54, 0xfe, 0x6, 0x80, 0x8}, {0x200000, 0x100}, {0xfff59000, 0x3ff}, 0xa0000008, 0x0, 0x70000, 0x400, 0xe, 0x4001, 0x6000, [0x4c7, 0x4, 0x1, 0x5]})
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000640)=0x7485) (async)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000680)={0xb}) (async)
ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f00000006c0)) (async)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000007c0)=@arm64_core={0x6030000000100022, &(0x7f0000000780)=0xfffffffffffffff8}) (async)
ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000800)={{0xeeee8000, 0x10000, 0xc, 0xf3, 0x80, 0x48, 0x10, 0x40, 0x6, 0x9, 0x2, 0x1}, {0x25000, 0x2000, 0x0, 0xf8, 0x5, 0x2, 0xfe, 0x18, 0x1, 0x0, 0xc0, 0x81}, {0xeeee8000, 0x100000, 0xb, 0x7f, 0x2, 0x38, 0x2, 0xa5, 0x4, 0x6, 0x5, 0xad}, {0xffff1000, 0x10000, 0x3, 0x9, 0x6, 0x0, 0x10, 0x2, 0x9, 0xf1, 0xf8, 0x3}, {0xc000, 0x9000, 0x10, 0xd8, 0x4, 0xbf, 0x0, 0x6, 0x4, 0x9, 0x7, 0x2}, {0xd000, 0x40000, 0xd, 0x80, 0xc, 0x3, 0x5, 0x7, 0x2, 0x4, 0x2}, {0xeeff0004, 0x5000, 0x8, 0x0, 0x2, 0x1, 0x4, 0x9, 0x1, 0x9, 0x7, 0x10}, {0x26000, 0x9000, 0x2, 0x7, 0x8, 0x28, 0x5, 0x6, 0xd0, 0xff, 0xfa, 0x4}, {0x1, 0x4}, {0x3000, 0x6}, 0x40040023, 0x0, 0xeeee8000, 0x40000, 0xe, 0x2000, 0xe000, [0x7, 0x0, 0x6f2e, 0x67d5]})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000940)=@attr_pmu_init) (async)
syz_kvm_setup_cpu$arm64(r3, r1, &(0x7f0000bd9000/0x400000)=nil, &(0x7f0000000d40)=[{0x0, &(0x7f0000000980)=[@code={0xa, 0x6c, {"008008d5007008d500ac200ec0f38ad200a0b0f2e10180d2020180d2c30180d2c40180d2020000d4e00300cb007008d560ac8bd20000b8f2e10180d2220180d2430180d2840180d2020000d40000789e00fc000f007008d5"}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x984}, @code={0xa, 0xcc, {"00e4002f201d87d200e0b8f2210180d2620180d2230080d2240180d2020000d40068284e80518ad200c0b8f2a10180d2a20180d2630180d2240180d2020000d4605e9ad200c0b8f2410180d2620180d2430080d2240080d2020000d40000001080e794d200c0b0f2210080d2020080d2830080d2440080d2020000d40000699e40589ad200c0b0f2a10180d2c20180d2630180d2640080d2020000d400968cd200c0b8f2810180d2220180d2a30080d2c40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0xad}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc0, 0x132, 0x1}}, @msr={0x14, 0x20, {0x603000000013dcf0, 0x58}}, @irq_setup={0x46, 0x18, {0x3, 0x30d}}, @uexit={0x0, 0x18, 0x2}, @smc={0x1e, 0x40, {0x84000001, [0x0, 0x4, 0x8, 0x6, 0x1]}}, @svc={0x122, 0x40, {0x86000000, [0x10001, 0x2, 0x0, 0x8, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x5, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x25}}, @irq_setup={0x46, 0x18, {0x1, 0xaa}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x9c, {"007008d5000008d5007008d50000201f80169bd20040b8f2c10080d2c20180d2030180d2440080d2020000d460fb9cd20080b0f2810180d2a20080d2230180d2840080d2020000d400e883d20040b8f2210080d2c20080d2830080d2a40080d2020000d40008c078007008d5c0b881d200c0b0f2010180d2820080d2a30080d2040080d2020000d4"}}], 0x3b4}], 0x1, 0x0, &(0x7f0000000d80)=[@featur1={0x1, 0x18}], 0x1)
eventfd2(0x7, 0x0) (async)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000dc0)={0x9a, "d4fed400e2ea2f9ce9a6ae3a886a7be4623727d2a7453956a3a416d5844fa8bc8e35d1158fdce1edf7e15f086c18bf041bc2e27a35c30c546535c39668fb5c9979b8e33646267f173e9b82921fdf4bd1d51951727d87fb5959ecec738afa8398dc2e4cad10de3d0e3f1802f4b39dde645d76484e5a7720a1cd00da99026aced88b62efcab7efd0e982b374d2165660a0d00d45350869b818ba01"})
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000012c0)={0x0, &(0x7f0000000e80)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x7, 0x3, 0x9, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0x164}}, @eret={0xe6, 0x18, 0xf0}, @code={0xa, 0xb4, {"0000007840ee92d20060b0f2610180d2020080d2830180d2a40080d2020000d4007008d5a0de9bd20080b0f2610180d2c20180d2a30180d2040180d2020000d4402191d200a0b0f2210180d2420080d2e30080d2c40080d2020000d4c0129ad20020b0f2810080d2c20180d2a30180d2440080d2020000d4007008d5007a8dd200e0b8f2c10080d2220080d2a30180d2c40180d2020000d4000400f800a4000d"}}, @svc={0x122, 0x40, {0x3f000000, [0x4, 0x22f, 0x97b, 0x3, 0x7fffffffffffffff]}}, @msr={0x14, 0x20, {0x17f, 0xff}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x4, 0x4, 0xfffffff7, 0x4}}, @uexit={0x0, 0x18, 0x82}, @irq_setup={0x46, 0x18, {0x4, 0x178}}, @msr={0x14, 0x20, {0x603000000013c290, 0x9}}, @svc={0x122, 0x40, {0x3f000000, [0x8, 0x3, 0x6, 0x1]}}, @svc={0x122, 0x40, {0x86000001, [0xffffffff, 0x2, 0x3, 0xf6d, 0xfff]}}, @mrs={0xbe, 0x18, {0x1ce57e47f582ff31}}, @msr={0x14, 0x20, {0x603000000013c01a, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0xa8}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x37c}}, @irq_setup={0x46, 0x18, {0x2, 0x199}}, @mrs={0xbe, 0x18, {0x60300000001383ce}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x301}}, @svc={0x122, 0x40, {0xffff, [0x3, 0x4, 0x0, 0x4648, 0x1b37]}}, @smc={0x1e, 0x40, {0x8000, [0x7, 0x1fb, 0x71, 0xb80, 0x3]}}, @smc={0x1e, 0x40, {0x84000006, [0xffffffffffffff0b, 0x2, 0x3, 0xb104, 0x5]}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x113}}, @eret={0xe6, 0x18}], 0x434}, &(0x7f0000001300)=[@featur2], 0x1)
ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000001340)={0x5, [0x5, 0x6, 0x9, 0x2, 0x3]}) (async)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000001380)=0x7)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000001400)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000013c0)=0x4}) (async)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000001480)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f0000001440)=0xf5f})
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001500)=@riscv64_aia_csr={0x8030000003010004, &(0x7f00000014c0)=0x1ac5}) (async)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000001540)=0x8)

43m43.04288323s ago: executing program 3 (id=277):
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x70000, 0x1000, &(0x7f0000b70000/0x1000)=nil})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x30, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001a, &(0x7f00000000c0)=0x11})
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000180)=0x11)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x0, 0x10, '\x00', 0x23})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x180, 0x0})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

43m40.827872709s ago: executing program 2 (id=278):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r12, 0x100000d, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r12, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

42m55.814526034s ago: executing program 34 (id=277):
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x0, 0x11, r1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x70000, 0x1000, &(0x7f0000b70000/0x1000)=nil})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x30, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001a, &(0x7f00000000c0)=0x11})
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000180)=0x11)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x7, 0x8, '\x00', 0xff})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x0, 0x10, '\x00', 0x23})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x180, 0x0})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

42m45.578496364s ago: executing program 35 (id=278):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r12, 0x100000d, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r12, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

14m9.1631597s ago: executing program 5 (id=421):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000300)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x12})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x400454d1, 0x110c230004)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@arm64={0x7, 0x7, 0x40, '\x00', 0xe000000})

14m4.552537586s ago: executing program 4 (id=422):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100008, &(0x7f0000000000)=0xc}) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000500)) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x8040aeb6, &(0x7f00000001c0)=@attr_other={0x0, 0x8, 0x100, 0x0})

13m44.457630328s ago: executing program 5 (id=423):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_bitmap={0x6030000000160000, &(0x7f00000000c0)=0x8})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@arm64={0x0, 0x4, 0x42, '\x00', 0x2})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_bitmap={0x6030000000160000, &(0x7f00000000c0)=0x8}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@arm64={0x0, 0x4, 0x42, '\x00', 0x2}) (async)

13m42.893619855s ago: executing program 4 (id=424):
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000000)=0x200})
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

13m33.035053439s ago: executing program 4 (id=425):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x741280, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
close(r3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x180c0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x8)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6100, 0x4, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
close(0x4)
r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)

13m30.216372128s ago: executing program 5 (id=426):
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x6, 0x5, 0xffffffffffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

13m16.655878287s ago: executing program 5 (id=427):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4e2f01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x5452, 0x36)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0xfff, 0x8, &(0x7f0000000380)=0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r9, 0x8})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000200)={0x9, 0x8000000, 0x0, r9})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r9, 0x2})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000240))
r10 = openat$kvm(0x0, &(0x7f0000000480), 0x100, 0x0)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000180)={0x10000, 0x5})
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x19)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7})
r12 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, 0x2, 0x0, r12})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000003c0)={0xeeef0000, 0x11000})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x2})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)

13m14.557200357s ago: executing program 4 (id=428):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r12, 0x100000d, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r12, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

13m0.175576967s ago: executing program 5 (id=429):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x80003fff, [0x800, 0x53, 0xa08, 0x8b, 0x81]}}], 0x40}, &(0x7f0000000080)=[@featur1={0x1, 0x20}], 0x1)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)=@arm64_ccsidr={0x6020000000110000, &(0x7f00000000c0)=0x1})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000140)={0x6, 0x0, 0x8})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r2, 0x2, 0x20010, r0, 0x0)
ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000180))
ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000240)=0x8000)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2a)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x6)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x1})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xa8, 0x0, 0x1})
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000380)={0x6, [0xe6d, 0x7f, 0x0, 0x2, 0x4, 0x100000001]})
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f00000003c0)=0x2)
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000400)={0x3, [0x400, 0x8001, 0x9]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000440)={0x8})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33)
ioctl$KVM_CAP_PTP_KVM(r5, 0x4068aea3, &(0x7f0000000480))
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000500)={0x8, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000540)={0x1e, "ac35c60a530502ac1b639bf24c9c3a8ada636d29fa313e3d53d498a7a2ea"})
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000580)={0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000600)={0x7, 0x7})
ioctl$KVM_GET_REGS(r3, 0x8360ae81, &(0x7f0000000640))
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000700)={r3, 0x9, 0x2, r3})

12m53.705187315s ago: executing program 4 (id=430):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x1002020, 0x5})
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil})

12m48.465355062s ago: executing program 5 (id=431):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x8080000, 0x9000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000180)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000200)=0x6})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x4000000001, 0x56)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x959abf7ac8b1883e, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3480ae0458b668f37f9a8457a3bf000", 0x0, 0x18)
ioctl$KVM_CREATE_VM(r3, 0x40086602, 0x20000000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x1})
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@code={0xa, 0x39, {"000008d500c8307ea08f9bd20080b8f2610080d2820180d2230180d2440080d23602380000d400d408d500fc001b205e8ad200e0b0f2210180d2c2930080d2d20180d2a40080d2020000d4007008d5007008d5208195d200c0b8f2010180d2220080d2430180d2e40180d2020000d4007008d5"}}], 0x87}, 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x200)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r14 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

12m23.709227745s ago: executing program 4 (id=432):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7, 0xb, 0x89, 0x0, 0x7, 0xa, 0x20, 0xc, 0x2, 0x7, 0x63, 0x7, 0x0, 0x9, 0x85, 0x40, 0x5, 0x1, 0xb1, '\x00', 0xff, 0x3})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
write$eventfd(r3, &(0x7f00000001c0)=0x4000000001, 0x56)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r5 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r5, &(0x7f0000000200)=0x8, 0x8)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xfb, 0x9, 0x0, 0xb, 0x6, 0xa, 0x3, 0x8, 0x1, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
write$eventfd(r6, &(0x7f00000001c0)=0x8100000001, 0x2d73)

12m0.606259978s ago: executing program 36 (id=431):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x8080000, 0x9000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000180)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000200)=0x6})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33)
write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x4000000001, 0x56)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x959abf7ac8b1883e, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3480ae0458b668f37f9a8457a3bf000", 0x0, 0x18)
ioctl$KVM_CREATE_VM(r3, 0x40086602, 0x20000000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x1})
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@code={0xa, 0x39, {"000008d500c8307ea08f9bd20080b8f2610080d2820180d2230180d2440080d23602380000d400d408d500fc001b205e8ad200e0b0f2210180d2c2930080d2d20180d2a40080d2020000d4007008d5007008d5208195d200c0b8f2010180d2220080d2430180d2e40180d2020000d4007008d5"}}], 0x87}, 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x200)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r14 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

11m36.056305723s ago: executing program 37 (id=432):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x7, 0xb, 0x89, 0x0, 0x7, 0xa, 0x20, 0xc, 0x2, 0x7, 0x63, 0x7, 0x0, 0x9, 0x85, 0x40, 0x5, 0x1, 0xb1, '\x00', 0xff, 0x3})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
write$eventfd(r3, &(0x7f00000001c0)=0x4000000001, 0x56)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r5 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r5, &(0x7f0000000200)=0x8, 0x8)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x2, 0x6, 0x6, 0x6, 0x48, 0x88, 0xfb, 0x9, 0x0, 0xb, 0x6, 0xa, 0x3, 0x8, 0x1, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
write$eventfd(r6, &(0x7f00000001c0)=0x8100000001, 0x2d73)

2m47.949999034s ago: executing program 6 (id=436):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000000))
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0xc5fb, 0x8, 0x0})

2m45.940002658s ago: executing program 7 (id=434):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r12, 0x100000d, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r12, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

2m30.813746424s ago: executing program 6 (id=437):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f00000000c0))
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000780)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0xf8c2, 0x8}}, @svc={0x122, 0x40, {0xffff, [0x1, 0x7, 0x8, 0x7fffffffffffffff, 0xa33]}}, @irq_setup={0x46, 0x18, {0x4, 0x2d9}}, @hvc={0x32, 0x40, {0x80000000, [0x291, 0x80, 0x9, 0x9, 0x9ae]}}, @msr={0x14, 0x20, {0x60300000001380a4, 0x9}}, @uexit={0x0, 0x18, 0x100}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x2, 0x10}}, @svc={0x122, 0x40, {0x84000006, [0x2257, 0x6830, 0x3, 0x10001, 0x2]}}, @eret={0xe6, 0x18, 0x800}, @uexit={0x0, 0x18, 0x40}, @code={0xa, 0x84, {"0000191e0004005e201395d20060b8f2610180d2220180d2c30180d2440080d2020000d4e0e587d20080b8f2210080d2a20080d2430080d2a40180d2020000d4007008d540b798d20060b0f2410180d2a20080d2630180d2040180d2020000d4000008d50094202e007008d5007008d5"}}, @code={0xa, 0x54, {"007008d500e4207e0004801a007008d5007008d5000008d5000008d5c0e39fd200e0b8f2c10180d2620180d2e30080d2640180d2020000d4000008d5008008d5"}}, @code={0xa, 0xb4, {"000020c860f495d20040b8f2810080d2020180d2a30080d2440180d2020000d4007008d5e08399d20020b0f2210180d2420180d2230180d2440080d2020000d4806c8bd200a0b0f2610080d2e20180d2e30180d2840080d2020000d40004007f203a83d200a0b0f2a10080d2220080d2a30180d2440180d2020000d4802f9fd200a0b0f2610180d2420180d2630080d2a40080d2020000d4000008d5000028d5"}}, @hvc={0x32, 0x40, {0x8, [0xfffffffffffffa61, 0x1000, 0x1, 0x7, 0x3ff]}}, @svc={0x122, 0x40, {0x84000052, [0x7ff, 0x1, 0x1, 0x8001, 0xc2]}}, @smc={0x1e, 0x40, {0x108003ffd, [0x4, 0x7a0, 0xe, 0x8c, 0xb]}}, @uexit={0x0, 0x18, 0x200}, @msr={0x14, 0x20, {0x6030000000138027, 0x8}}, @smc={0x1e, 0x40, {0x80, [0x8, 0x2, 0x800, 0x7fff, 0x21]}}, @irq_setup={0x46, 0x18, {0x2, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0xe, 0x9, 0x2}}], 0x4a4}, &(0x7f00000007c0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000800)={0xb2, "c055dbab54c62dd46822e79b62d37a8c51b3779240ebc1548f5cb718c7e98e8f44158ee65c3b01c250a62de48e401da6356f62314993d18b5b6a55f749bf030ea14dc9c472d3de5533f1c7c3c87218bf32024e5add35bccd18ede94add95215c6c449da9dcf916e6a907fe3a56b8b68b13777393c7207fde44811ae09ce7ddef7064faed92cedee2c3cf650111eedf16780325afd24d1908cd85597f71aed36f67bc41e4c6466a95a8171881355311e4d444"})
syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})

2m19.387607889s ago: executing program 7 (id=438):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xfc6083f40b5e039e, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0x8000})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000240)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2})
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)={0x9000, 0x105000})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xc0189436, 0x20003fff)
syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)

1m58.73842559s ago: executing program 6 (id=439):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0x0)

1m54.968992866s ago: executing program 7 (id=440):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
eventfd2(0xfffff800, 0x80000)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r6, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46cc00, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x8003, 0x10000000004}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

1m37.195213089s ago: executing program 6 (id=441):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x3c0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x4f9, 0x7, 0x4}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m33.625667992s ago: executing program 7 (id=442):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r9})
r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r12, 0x100000d, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r12, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

1m19.139384782s ago: executing program 6 (id=443):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000000027)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7})
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x400000000000000, 0x6000, 0x0, r2})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0xfffff828, 0x6})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x6000})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xea12157bff932e6})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)

1m6.823232896s ago: executing program 7 (id=444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x400454d9, 0x110c230020)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000380)={0xa8, 0x0, 0x3})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bc5000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r11 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x408, &(0x7f0000000140)=0x200a88})
r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0x4004aec2, &(0x7f0000000000)=0x4)
r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})

48.730397365s ago: executing program 6 (id=445):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3})
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x2})
close(r7)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000004, [0x100000004, 0x8000000000000000, 0xffffffffffffffff, 0xee23, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@smc={0x1e, 0x40, {0x8400000e, [0x80000000, 0x10001, 0x71e, 0x8001, 0x4]}}], 0x40}, &(0x7f0000000200)=[@featur2={0x1, 0x21}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xf})

19.055341716s ago: executing program 38 (id=444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x400454d9, 0x110c230020)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000380)={0xa8, 0x0, 0x3})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bc5000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r11 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x408, &(0x7f0000000140)=0x200a88})
r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0x4004aec2, &(0x7f0000000000)=0x4)
r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})

0s ago: executing program 39 (id=445):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3})
r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000180)=0x2})
close(r7)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x84000004, [0x100000004, 0x8000000000000000, 0xffffffffffffffff, 0xee23, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@smc={0x1e, 0x40, {0x8400000e, [0x80000000, 0x10001, 0x71e, 0x8001, 0x4]}}], 0x40}, &(0x7f0000000200)=[@featur2={0x1, 0x21}], 0x1)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xf})

kernel console output (not intermixed with test programs):

[  397.203858][ T3170] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.437317][ T3170] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:44996' (ED25519) to the list of known hosts.
[  609.683806][   T24] audit: type=1400 audit(608.830:61): avc:  denied  { name_bind } for  pid=3320 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  610.582901][   T24] audit: type=1400 audit(609.740:62): avc:  denied  { execute } for  pid=3321 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  610.605021][   T24] audit: type=1400 audit(609.750:63): avc:  denied  { execute_no_trans } for  pid=3321 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  637.881039][   T24] audit: type=1400 audit(637.030:64): avc:  denied  { mounton } for  pid=3321 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  637.947049][   T24] audit: type=1400 audit(637.100:65): avc:  denied  { mount } for  pid=3321 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  638.127205][ T3321] cgroup: Unknown subsys name 'net'
[  638.240414][   T24] audit: type=1400 audit(637.390:66): avc:  denied  { unmount } for  pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  638.883381][ T3321] cgroup: Unknown subsys name 'cpuset'
[  639.105263][ T3321] cgroup: Unknown subsys name 'rlimit'
[  640.840926][   T24] audit: type=1400 audit(639.990:67): avc:  denied  { setattr } for  pid=3321 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  640.875498][   T24] audit: type=1400 audit(640.030:68): avc:  denied  { mounton } for  pid=3321 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  640.910586][   T24] audit: type=1400 audit(640.060:69): avc:  denied  { mount } for  pid=3321 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  642.771573][ T3324] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  642.788172][   T24] audit: type=1400 audit(641.940:70): avc:  denied  { relabelto } for  pid=3324 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  642.821221][   T24] audit: type=1400 audit(641.970:71): avc:  denied  { write } for  pid=3324 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  642.995224][   T24] audit: type=1400 audit(642.140:72): avc:  denied  { read } for  pid=3321 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  643.017147][   T24] audit: type=1400 audit(642.170:73): avc:  denied  { open } for  pid=3321 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  643.062793][ T3321] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  698.323122][   T24] audit: type=1400 audit(697.480:74): avc:  denied  { execmem } for  pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  704.717065][   T24] audit: type=1400 audit(703.870:75): avc:  denied  { read } for  pid=3328 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  704.764611][   T24] audit: type=1400 audit(703.920:76): avc:  denied  { open } for  pid=3327 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  704.822687][   T24] audit: type=1400 audit(703.960:77): avc:  denied  { mounton } for  pid=3328 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  705.073438][   T24] audit: type=1400 audit(704.230:78): avc:  denied  { module_request } for  pid=3328 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  705.099385][   T24] audit: type=1400 audit(704.250:79): avc:  denied  { module_request } for  pid=3327 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  706.131243][   T24] audit: type=1400 audit(705.280:80): avc:  denied  { sys_module } for  pid=3327 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  729.295560][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.590363][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.001692][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.353342][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.491802][ T3327] hsr_slave_0: entered promiscuous mode
[  742.520440][ T3327] hsr_slave_1: entered promiscuous mode
[  743.693028][ T3328] hsr_slave_0: entered promiscuous mode
[  743.737209][ T3328] hsr_slave_1: entered promiscuous mode
[  743.794936][ T3328] debugfs: 'hsr0' already exists in 'hsr'
[  743.801439][ T3328] Cannot create hsr debugfs directory
[  749.981436][   T24] audit: type=1400 audit(749.130:81): avc:  denied  { create } for  pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  750.027785][   T24] audit: type=1400 audit(749.170:82): avc:  denied  { write } for  pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  750.111607][   T24] audit: type=1400 audit(749.230:83): avc:  denied  { read } for  pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  750.244344][ T3327] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  750.576941][ T3327] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  750.835755][ T3327] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  751.352248][ T3327] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  753.033650][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  753.194738][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  753.357684][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  753.546168][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  770.357967][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.711000][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.112849][ T3327] veth0_vlan: entered promiscuous mode
[  826.811484][ T3327] veth1_vlan: entered promiscuous mode
[  830.063147][ T3327] veth0_macvtap: entered promiscuous mode
[  830.163842][ T3328] veth0_vlan: entered promiscuous mode
[  830.664032][ T3327] veth1_macvtap: entered promiscuous mode
[  831.581602][ T3328] veth1_vlan: entered promiscuous mode
[  834.535006][ T3422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  834.650397][ T3422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  834.652050][ T3422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  834.654860][ T3422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.789114][ T3328] veth0_macvtap: entered promiscuous mode
[  836.651747][ T3328] veth1_macvtap: entered promiscuous mode
[  838.555654][   T24] audit: type=1400 audit(837.660:84): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  838.716145][   T24] audit: type=1400 audit(837.870:85): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/syzkaller.ceA8jG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  838.945426][   T24] audit: type=1400 audit(838.100:86): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  839.315760][   T24] audit: type=1400 audit(838.430:87): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/syzkaller.ceA8jG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  839.446279][   T24] audit: type=1400 audit(838.600:88): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/syzkaller.ceA8jG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  839.615285][ T3415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.630225][ T3415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.637482][ T3415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.666008][ T3415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.151434][   T24] audit: type=1400 audit(839.290:89): avc:  denied  { unmount } for  pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  840.466578][   T24] audit: type=1400 audit(839.620:90): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  840.586289][   T24] audit: type=1400 audit(839.740:91): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="gadgetfs" ino=3725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  840.845794][   T24] audit: type=1400 audit(840.000:92): avc:  denied  { mount } for  pid=3327 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  840.956999][   T24] audit: type=1400 audit(840.110:93): avc:  denied  { mounton } for  pid=3327 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  842.560397][ T3327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  843.926543][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  843.929881][   T24] audit: type=1400 audit(843.060:95): avc:  denied  { read write } for  pid=3327 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  843.973869][   T24] audit: type=1400 audit(843.110:96): avc:  denied  { open } for  pid=3327 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  844.019862][   T24] audit: type=1400 audit(843.160:97): avc:  denied  { ioctl } for  pid=3327 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  856.727597][   T24] audit: type=1400 audit(855.880:98): avc:  denied  { read } for  pid=3482 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  856.836481][   T24] audit: type=1400 audit(855.990:99): avc:  denied  { open } for  pid=3482 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  858.181704][   T24] audit: type=1400 audit(857.320:100): avc:  denied  { ioctl } for  pid=3482 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  861.897429][   T24] audit: type=1400 audit(861.050:101): avc:  denied  { write } for  pid=3485 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  865.004239][ T3491] KVM: debugfs: duplicate directory 3491-10
[  872.163608][   T24] audit: type=1400 audit(871.310:102): avc:  denied  { setattr } for  pid=3493 comm="syz.1.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  890.556558][   T24] audit: type=1400 audit(889.710:103): avc:  denied  { map } for  pid=3500 comm="syz.1.6" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  890.622589][   T24] audit: type=1400 audit(889.770:104): avc:  denied  { execute } for  pid=3500 comm="syz.1.6" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  915.966526][   T24] audit: type=1400 audit(915.080:105): avc:  denied  { append } for  pid=3513 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  948.165292][   T24] audit: type=1400 audit(947.300:106): avc:  denied  { execute } for  pid=3533 comm="syz.0.17" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1105.102598][   T24] audit: type=1400 audit(1104.190:107): avc:  denied  { ioctl } for  pid=3616 comm="syz.1.43" path="net:[4026532630]" dev="nsfs" ino=4026532630 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1136.999310][    C0] hrtimer: interrupt took 1096000 ns
[ 1171.854597][ T3651] kvm [3651]: Failed to find VMA for hva 0x21016000
[ 1214.477829][   T24] audit: type=1400 audit(1213.550:108): avc:  denied  { create } for  pid=3674 comm="syz.0.62" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1630.039466][   T24] audit: type=1400 audit(1629.160:109): avc:  denied  { execute } for  pid=3910 comm="syz.0.134" path=2F36362FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1634.668074][ T3919] KVM: debugfs: duplicate directory 3919-7
[ 1664.243781][   T24] audit: type=1400 audit(1663.390:110): avc:  denied  { map } for  pid=3934 comm="syz.0.142" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1664.299886][   T24] audit: type=1400 audit(1663.440:111): avc:  denied  { read } for  pid=3934 comm="syz.0.142" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1665.469851][   T24] audit: type=1400 audit(1664.610:112): avc:  denied  { write } for  pid=3934 comm="syz.0.142" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=11474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1752.483791][ T3982] kvm [3982]: Failed to find VMA for hva 0x20d8d000
[ 1752.510661][ T3985] kvm [3985]: Failed to find VMA for hva 0x20d8d000
[ 1793.646248][ T4003] kvm [4003]: Failed to find VMA for hva 0x20d8d000
[ 1793.682889][ T4001] kvm [4001]: Failed to find VMA for hva 0x20d8d000
[ 1834.893265][ T4027] kvm [4027]: Failed to find VMA for hva 0x20d8d000
[ 1834.934096][ T4028] kvm [4028]: Failed to find VMA for hva 0x20d8d000
[ 1981.434266][ T4117] kvm [4117]: Failed to find VMA for hva 0x20d8d000
[ 1981.480839][ T4116] kvm [4116]: Failed to find VMA for hva 0x20d8d000
[ 2114.210603][   T24] audit: type=1400 audit(2113.350:113): avc:  denied  { map } for  pid=4193 comm="syz.0.218" path="pipe:[2724]" dev="pipefs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2119.133619][ T4198] FAULT_INJECTION: forcing a failure.
[ 2119.133619][ T4198] name failslab, interval 1, probability 0, space 0, times 1
[ 2119.202470][ T4198] CPU: 0 UID: 0 PID: 4198 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT 
[ 2119.203165][ T4198] Hardware name: linux,dummy-virt (DT)
[ 2119.207216][ T4198] Call trace:
[ 2119.207659][ T4198]  show_stack+0x2c/0x3c (C)
[ 2119.209752][ T4198]  __dump_stack+0x30/0x40
[ 2119.210158][ T4198]  dump_stack_lvl+0xd8/0x12c
[ 2119.210486][ T4198]  dump_stack+0x1c/0x28
[ 2119.210832][ T4198]  should_fail_ex+0x56c/0x6d8
[ 2119.211106][ T4198]  should_failslab+0xb8/0xec
[ 2119.211358][ T4198]  __kmalloc_noprof+0xe8/0x598
[ 2119.211698][ T4198]  tomoyo_realpath_from_path+0xdc/0x628
[ 2119.212021][ T4198]  tomoyo_path_number_perm+0x13c/0x33c
[ 2119.212317][ T4198]  tomoyo_file_ioctl+0x2c/0x3c
[ 2119.212639][ T4198]  security_file_ioctl+0xe0/0x2cc
[ 2119.212967][ T4198]  __arm64_sys_ioctl+0xd0/0x244
[ 2119.213248][ T4198]  invoke_syscall+0x90/0x230
[ 2119.213556][ T4198]  el0_svc_common+0x120/0x2f4
[ 2119.213892][ T4198]  do_el0_svc+0x58/0x74
[ 2119.214194][ T4198]  el0_svc+0x5c/0x238
[ 2119.214446][ T4198]  el0t_64_sync_handler+0x84/0x12c
[ 2119.214724][ T4198]  el0t_64_sync+0x198/0x19c
[ 2119.353899][ T4198] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2304.269996][   T24] audit: type=1400 audit(2303.410:114): avc:  denied  { map } for  pid=4315 comm="syz.1.255" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 2415.096352][ T3375] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2416.212807][ T3375] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2417.245385][ T3375] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2418.363124][ T3375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2431.072264][ T3375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2431.240667][ T3375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2431.357210][ T3375] bond0 (unregistering): Released all slaves
[ 2433.613903][ T3375] hsr_slave_0: left promiscuous mode
[ 2433.716388][ T3375] hsr_slave_1: left promiscuous mode
[ 2434.273403][ T3375] veth1_macvtap: left promiscuous mode
[ 2434.286362][ T3375] veth0_macvtap: left promiscuous mode
[ 2434.333560][ T3375] veth1_vlan: left promiscuous mode
[ 2434.346728][ T3375] veth0_vlan: left promiscuous mode
[ 2459.462801][ T3375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2460.975625][ T3375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2462.430988][ T3375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2463.356235][ T3375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2471.677148][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2472.422164][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2479.933233][ T3375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2480.093401][ T3375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2480.183738][ T3375] bond0 (unregistering): Released all slaves
[ 2481.259890][ T3375] hsr_slave_0: left promiscuous mode
[ 2481.352030][ T3375] hsr_slave_1: left promiscuous mode
[ 2481.884651][ T3375] veth1_macvtap: left promiscuous mode
[ 2481.903224][ T3375] veth0_macvtap: left promiscuous mode
[ 2481.907429][ T3375] veth1_vlan: left promiscuous mode
[ 2481.927318][ T3375] veth0_vlan: left promiscuous mode
[ 2497.405358][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2497.816380][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2508.237811][ T4339] hsr_slave_0: entered promiscuous mode
[ 2508.316111][ T4339] hsr_slave_1: entered promiscuous mode
[ 2523.704976][ T4346] hsr_slave_0: entered promiscuous mode
[ 2523.755578][ T4346] hsr_slave_1: entered promiscuous mode
[ 2523.787756][ T4346] debugfs: 'hsr0' already exists in 'hsr'
[ 2523.830888][ T4346] Cannot create hsr debugfs directory
[ 2526.962610][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2528.146655][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2528.587356][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2529.142215][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2537.283296][ T4346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2537.567076][ T4346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2537.889623][ T4346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2538.196121][ T4346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2552.473846][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2561.056072][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2649.230871][ T4339] veth0_vlan: entered promiscuous mode
[ 2650.161874][ T4339] veth1_vlan: entered promiscuous mode
[ 2653.790858][ T4339] veth0_macvtap: entered promiscuous mode
[ 2654.424973][ T4339] veth1_macvtap: entered promiscuous mode
[ 2657.701825][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2657.706019][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2657.860161][ T3375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2657.943405][ T4352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2662.413530][ T4346] veth0_vlan: entered promiscuous mode
[ 2662.790512][   T24] audit: type=1400 audit(2661.930:115): avc:  denied  { unmount } for  pid=4339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 2663.804244][ T4346] veth1_vlan: entered promiscuous mode
[ 2666.952978][ T4346] veth0_macvtap: entered promiscuous mode
[ 2667.736143][ T4346] veth1_macvtap: entered promiscuous mode
[ 2671.373474][ T4355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2671.386679][ T4355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2671.424224][ T4355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2671.589729][ T4355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2809.443524][ T4634] kvm [4634]: Failed to find VMA for hva 0x20d8d000
[ 2809.521863][ T4635] kvm [4635]: Failed to find VMA for hva 0x20d8d000
[ 2862.726801][ T4474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2865.578107][ T4474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2867.257097][ T4474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2869.175717][ T4474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2891.411483][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2891.713387][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2891.877774][ T4474] bond0 (unregistering): Released all slaves
[ 2894.759730][ T4474] hsr_slave_0: left promiscuous mode
[ 2895.050411][ T4474] hsr_slave_1: left promiscuous mode
[ 2896.029551][ T4474] veth1_macvtap: left promiscuous mode
[ 2896.030622][ T4474] veth0_macvtap: left promiscuous mode
[ 2896.050447][ T4474] veth1_vlan: left promiscuous mode
[ 2896.091101][ T4474] veth0_vlan: left promiscuous mode
[ 2923.511748][ T4474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2925.190876][ T4474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2926.825342][ T4474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2928.096626][ T4474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2951.045411][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2951.137452][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2951.261150][ T4474] bond0 (unregistering): Released all slaves
[ 2952.414284][ T4474] hsr_slave_0: left promiscuous mode
[ 2952.475917][ T4474] hsr_slave_1: left promiscuous mode
[ 2952.687613][ T4474] veth1_macvtap: left promiscuous mode
[ 2952.709566][ T4474] veth0_macvtap: left promiscuous mode
[ 2952.713456][ T4474] veth1_vlan: left promiscuous mode
[ 2952.724335][ T4474] veth0_vlan: left promiscuous mode
[ 3000.335191][ T4661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3000.733425][ T4661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3005.205343][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3005.542416][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3028.597678][ T4661] hsr_slave_0: entered promiscuous mode
[ 3028.694505][ T4661] hsr_slave_1: entered promiscuous mode
[ 3032.011244][ T4664] hsr_slave_0: entered promiscuous mode
[ 3032.082980][ T4664] hsr_slave_1: entered promiscuous mode
[ 3032.119626][ T4664] debugfs: 'hsr0' already exists in 'hsr'
[ 3032.122708][ T4664] Cannot create hsr debugfs directory
[ 3048.627767][ T4661] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3049.261233][ T4661] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3049.841627][ T4661] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3050.524984][ T4661] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3057.455649][ T4664] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 3057.917955][ T4664] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 3058.441635][ T4664] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 3058.867895][ T4664] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 3086.331142][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3090.267001][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3224.492286][ T4661] veth0_vlan: entered promiscuous mode
[ 3225.477319][ T4661] veth1_vlan: entered promiscuous mode
[ 3230.615487][ T4661] veth0_macvtap: entered promiscuous mode
[ 3231.220069][ T4664] veth0_vlan: entered promiscuous mode
[ 3231.713472][ T4661] veth1_macvtap: entered promiscuous mode
[ 3233.822725][ T4664] veth1_vlan: entered promiscuous mode
[ 3238.362988][ T4474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3238.376301][ T4474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3238.432991][ T4474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3238.454916][ T4474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3241.421797][ T4664] veth0_macvtap: entered promiscuous mode
[ 3242.803947][ T4664] veth1_macvtap: entered promiscuous mode
[ 3249.044254][ T3415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3249.073719][ T3415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3249.140095][ T4355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3249.180618][ T3415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4150.667575][ T5344] FAULT_INJECTION: forcing a failure.
[ 4150.667575][ T5344] name failslab, interval 1, probability 0, space 0, times 0
[ 4150.732184][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.5.372 Not tainted syzkaller #0 PREEMPT 
[ 4150.732596][ T5344] Hardware name: linux,dummy-virt (DT)
[ 4150.732709][ T5344] Call trace:
[ 4150.732792][ T5344]  show_stack+0x2c/0x3c (C)
[ 4150.733207][ T5344]  __dump_stack+0x30/0x40
[ 4150.733533][ T5344]  dump_stack_lvl+0xd8/0x12c
[ 4150.733845][ T5344]  dump_stack+0x1c/0x28
[ 4150.734178][ T5344]  should_fail_ex+0x56c/0x6d8
[ 4150.734447][ T5344]  should_failslab+0xb8/0xec
[ 4150.734713][ T5344]  __kmalloc_noprof+0xe8/0x598
[ 4150.735057][ T5344]  kvm_io_bus_register_dev+0x1a4/0x658
[ 4150.735341][ T5344]  vgic_register_dist_iodev+0xfc/0x140
[ 4150.735641][ T5344]  kvm_vgic_map_resources+0x20c/0x2fc
[ 4150.735898][ T5344]  kvm_arch_vcpu_run_pid_change+0x168/0x498
[ 4150.736221][ T5344]  kvm_vcpu_ioctl+0xb30/0xc6c
[ 4150.736548][ T5344]  __arm64_sys_ioctl+0x18c/0x244
[ 4150.736841][ T5344]  invoke_syscall+0x90/0x230
[ 4150.737185][ T5344]  el0_svc_common+0x120/0x2f4
[ 4150.737497][ T5344]  do_el0_svc+0x58/0x74
[ 4150.737792][ T5344]  el0_svc+0x5c/0x238
[ 4150.738076][ T5344]  el0t_64_sync_handler+0x84/0x12c
[ 4150.738365][ T5344]  el0t_64_sync+0x198/0x19c
[ 4150.883201][ T5344] kvm [5344]: Unable to register VGIC dist MMIO regions
[ 4532.478126][ T5510] KVM: debugfs: duplicate directory 5510-4
[ 4801.305220][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4801.774059][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4842.181836][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4842.693665][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4851.297005][ T5573] hsr_slave_0: entered promiscuous mode
[ 4851.496182][ T5573] hsr_slave_1: entered promiscuous mode
[ 4851.651906][ T5573] debugfs: 'hsr0' already exists in 'hsr'
[ 4851.689755][ T5573] Cannot create hsr debugfs directory
[ 4862.854678][ T5588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4865.456402][ T5588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4868.075312][ T5588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4870.237602][ T5588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4893.518053][ T5588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4893.713802][ T5588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4893.866579][ T5588] bond0 (unregistering): Released all slaves
[ 4896.505782][ T5588] hsr_slave_0: left promiscuous mode
[ 4896.581321][ T5588] hsr_slave_1: left promiscuous mode
[ 4896.986630][ T5588] veth1_macvtap: left promiscuous mode
[ 4897.016994][ T5588] veth0_macvtap: left promiscuous mode
[ 4897.033045][ T5588] veth1_vlan: left promiscuous mode
[ 4897.064702][ T5588] veth0_vlan: left promiscuous mode
[ 4926.366386][ T5583] hsr_slave_0: entered promiscuous mode
[ 4926.475189][ T5583] hsr_slave_1: entered promiscuous mode
[ 4926.561249][ T5583] debugfs: 'hsr0' already exists in 'hsr'
[ 4926.579888][ T5583] Cannot create hsr debugfs directory
[ 4929.636368][ T5573] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4930.187856][ T5573] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4930.637723][ T5573] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4931.325945][ T5573] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4934.412455][ T5588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4937.396120][ T5588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4939.487407][ T5588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4941.356450][ T5588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4967.892368][ T5588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4968.354756][ T5588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4968.534392][ T5588] bond0 (unregistering): Released all slaves
[ 4971.572325][ T5588] hsr_slave_0: left promiscuous mode
[ 4971.713671][ T5588] hsr_slave_1: left promiscuous mode
[ 4972.436699][ T5588] veth1_macvtap: left promiscuous mode
[ 4972.514108][ T5588] veth0_macvtap: left promiscuous mode
[ 4972.537180][ T5588] veth1_vlan: left promiscuous mode
[ 4972.564795][ T5588] veth0_vlan: left promiscuous mode
[ 5006.894479][ T5583] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5007.703489][ T5583] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5008.556619][ T5583] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5008.934856][ T5583] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5014.485681][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5046.804689][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5179.103650][ T5573] veth0_vlan: entered promiscuous mode
[ 5180.696197][ T5573] veth1_vlan: entered promiscuous mode
[ 5186.881408][ T5573] veth0_macvtap: entered promiscuous mode
[ 5187.872962][ T5573] veth1_macvtap: entered promiscuous mode
[ 5192.801535][ T5588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5192.813640][ T5588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5192.834585][ T5588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5192.880675][ T5588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5219.384713][ T5583] veth0_vlan: entered promiscuous mode
[ 5221.496898][ T5583] veth1_vlan: entered promiscuous mode
[ 5227.363124][ T5583] veth0_macvtap: entered promiscuous mode
[ 5228.351346][ T5583] veth1_macvtap: entered promiscuous mode
[ 5234.650553][ T5470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5234.725247][ T4831] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5234.790622][ T4831] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5234.816250][ T4831] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5565.221171][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5565.853909][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5583.575912][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5584.295118][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5629.962472][ T5871] hsr_slave_0: entered promiscuous mode
[ 5630.106790][ T5871] hsr_slave_1: entered promiscuous mode
[ 5653.520888][ T5879] hsr_slave_0: entered promiscuous mode
[ 5653.683536][ T5879] hsr_slave_1: entered promiscuous mode
[ 5653.850595][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[ 5653.862003][ T5879] Cannot create hsr debugfs directory
[ 5687.592214][ T5871] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5689.600624][ T5871] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5691.271936][ T5871] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5693.081558][ T5871] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5708.797650][ T5879] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5709.911299][ T5879] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5710.830369][ T5879] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5711.896176][ T5879] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5757.495498][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5772.688016][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5818.291096][   T26] INFO: task syz.6.445:5857 blocked for more than 430 seconds.
[ 5818.334267][   T26]       Not tainted syzkaller #0
[ 5818.370355][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 5818.382756][   T26] task:syz.6.445       state:D stack:0     pid:5857  tgid:5857  ppid:5573   task_flags:0x400040 flags:0x00000011
[ 5818.384087][   T26] Call trace:
[ 5818.384501][   T26]  __switch_to+0x584/0xb00 (T)
[ 5818.385176][   T26]  __schedule+0x1da4/0x3678
[ 5818.385699][   T26]  schedule+0xac/0x27c
[ 5818.386236][   T26]  schedule_timeout+0x68/0x1ec
[ 5818.386680][   T26]  do_wait_for_common+0x28c/0x440
[ 5818.387129][   T26]  wait_for_completion+0x44/0x5c
[ 5818.387648][   T26]  __synchronize_srcu+0x2a4/0x320
[ 5818.388113][   T26]  synchronize_srcu+0x3d0/0x4f8
[ 5818.569798][   T26]  mmu_notifier_unregister+0x320/0x428
[ 5818.570486][   T26]  kvm_put_kvm+0x698/0xbe0
[ 5818.570938][   T26]  kvm_vm_release+0x58/0x78
[ 5818.571467][   T26]  __fput+0x4ac/0x978
[ 5818.571999][   T26]  ____fput+0x20/0x58
[ 5818.572573][   T26]  task_work_run+0x1b8/0x250
[ 5818.573108][   T26]  exit_to_user_mode_loop+0x110/0x188
[ 5818.573603][   T26]  el0_svc+0x17c/0x238
[ 5818.574078][   T26]  el0t_64_sync_handler+0x84/0x12c
[ 5818.574537][   T26]  el0t_64_sync+0x198/0x19c
[ 5818.576194][   T26] 
[ 5818.576194][   T26] Showing all locks held in the system:
[ 5818.576702][   T26] 1 lock held by khungtaskd/26:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 5818.577117][   T26]  #0: ffff800087c971f8 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[ 5818.827549][   T26] 2 locks held by kworker/u4:2/31:
[ 5818.827947][   T26]  #0: 9ff000000d036548 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7f8/0x1d94
[ 5818.852945][   T26]  #1: ffff80008cd87ca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x884/0x1d94
[ 5818.854804][   T26] 2 locks held by getty/3200:
[ 5818.855173][   T26]  #0: 1af000001288a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 5818.856886][   T26]  #1: 48ff80008ca2b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234
[ 5819.061677][   T26] 2 locks held by syz-executor/3321:
[ 5819.062203][   T26] 2 locks held by kworker/u4:5/3374:
[ 5819.062531][   T26]  #0: 9ff000000d036548 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7f8/0x1d94
[ 5819.064615][   T26]  #1: ffff80008fe77ca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x884/0x1d94
[ 5819.066887][   T26] 3 locks held by kworker/u4:8/3422:
[ 5819.067255][   T26] 3 locks held by kworker/u4:1/4180:
[ 5819.067572][   T26] 3 locks held by kworker/u4:9/4474:
[ 5819.067903][   T26] 3 locks held by kworker/u4:11/4831:
[ 5819.220226][   T26] 3 locks held by kworker/u4:3/5316:
[ 5819.220950][   T26] 3 locks held by kworker/u4:0/5470:
[ 5819.221346][   T26] 3 locks held by kworker/u4:6/5588:
[ 5819.221672][   T26] 3 locks held by kworker/u4:12/5648:
[ 5819.222016][   T26] 2 locks held by syz.7.444/5853:
[ 5819.222395][   T26] 2 locks held by kworker/u4:10/5949:
[ 5819.222736][   T26] 3 locks held by kworker/u4:15/6030:
[ 5819.223085][   T26] 2 locks held by rm/6031:
[ 5819.223394][   T26] 2 locks held by modprobe/6032:
[ 5819.223894][   T26] 
[ 5819.224193][   T26] =============================================
[ 5819.224193][   T26] 
[ 5819.225185][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[ 5819.237063][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 5819.238461][   T26] Hardware name: linux,dummy-virt (DT)
[ 5819.239419][   T26] Call trace:
[ 5819.240178][   T26]  show_stack+0x2c/0x3c (C)
[ 5819.241315][   T26]  __dump_stack+0x30/0x40
[ 5819.242407][   T26]  dump_stack_lvl+0x30/0x12c
[ 5819.243364][   T26]  dump_stack+0x1c/0x28
[ 5819.244409][   T26]  vpanic+0x4d0/0x848
[ 5819.245352][   T26]  vpanic+0x0/0x848
[ 5819.246241][   T26]  hung_task_panic+0x0/0x2c
[ 5819.247328][   T26]  kthread+0x4d4/0x51c
[ 5819.248384][   T26]  ret_from_fork+0x10/0x20
[ 5819.250322][   T26] Kernel Offset: disabled
[ 5819.251169][   T26] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f
[ 5819.252436][   T26] Memory Limit: none
[ 5819.254707][   T26] Rebooting in 86400 seconds..