last executing test programs:

32m56.03061876s ago: executing program 0 (id=90):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, 0x0})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a82616})
r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x5, 0x2, 0x4}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

32m47.058551618s ago: executing program 1 (id=92):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, 0x0)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000001c0)=@arm64_core={0x6030000000100046, &(0x7f0000000100)=0x2})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0xc0ffff, 0x11, r7, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0xeeee0000, 0x1000, &(0x7f0000d3b000/0x1000)=nil})
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)

32m45.682123943s ago: executing program 0 (id=93):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x1c000, 0x408)
ioctl$KVM_CHECK_EXTENSION(r4, 0x541b, 0xac)

32m37.078302528s ago: executing program 0 (id=94):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x200000c, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0xd, 0x80a0000, 0x0, r3}) (async)
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x80811501, 0x20000000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

32m36.222256526s ago: executing program 1 (id=95):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000000000001)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013e532}}, @hvc={0x32, 0x40, {0x84000007, [0x1, 0x8000, 0xff, 0x7f, 0x4]}}, @smc={0x1e, 0x40, {0x84000012, [0x6, 0x10000, 0x5, 0x801f, 0x7fffffff]}}, @mrs={0xbe, 0x18, {0x603000000013df78}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x400, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x143}}, @code={0xa, 0x84, {"0000c03ca02592d20080b8f2a10180d2220180d2c30080d2c40080d2020000d4000028d560f78ed200e0b0f2810080d2c20080d2c30180d2a40080d2020000d4007008d5007008d50000c02c0098a12e000028d5e0e580d20040b0f2a10080d2e20080d2e30080d2840080d2020000d4"}}, @smc={0x1e, 0x40, {0xc4000011, [0x8, 0x8ac, 0x1, 0x3869, 0xfffffffe0]}}, @eret={0xe6, 0x18, 0x7ff}, @hvc={0x32, 0x40, {0xffff, [0x8000000000000001, 0x8, 0x5, 0x0, 0xff]}}, @msr={0x14, 0x20, {0x603000000013e132, 0x4}}, @code={0xa, 0x54, {"0040df0c000008d5000008d5007008d5007008d5007008d500e882d200a0b8f2410180d2820180d2e30080d2040180d2020000d4008008d5007008d5007008d5"}}, @eret={0xe6, 0x18, 0x3}, @hvc={0x32, 0x40, {0x0, [0x7, 0xd04, 0x1, 0x8]}}, @svc={0x122, 0x40, {0x80000001, [0x7, 0x41c7, 0x0, 0xadf8, 0xffff]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x24a}}, @hvc={0x32, 0x40, {0x84000007, [0x1, 0x7, 0x100000001, 0x8, 0x9]}}, @irq_setup={0x46, 0x18, {0x2, 0x168}}, @hvc={0x32, 0x40, {0x8600ff01, [0x8, 0x7, 0x0, 0x7, 0x7]}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0xb}, @hvc={0x32, 0x40, {0xc4000014, [0x5, 0x8, 0x8ac4, 0x80000000, 0x7f]}}], 0x450}, &(0x7f0000000040)=[@featur2], 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0x40087602, 0x1)

32m31.488449838s ago: executing program 1 (id=96):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0xff, 0x14, 0x8f, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xff, 0xb591, &(0x7f0000000080)=0x2c8})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

32m30.032569931s ago: executing program 0 (id=97):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x9a7901, 0x0) (async, rerun: 32)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140000, &(0x7f0000000000)=0x2}) (async, rerun: 32)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r8 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r8}) (async, rerun: 32)
close(r8) (async, rerun: 32)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xa6b4) (async, rerun: 32)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r13, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1ff}) (async, rerun: 32)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) (rerun: 32)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, 0x0) (async)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r10, r17, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000280)=[@featur2={0x1, 0x11}], 0x1)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000100)=@arm64_sve={0x6080000000150256, &(0x7f00000002c0)=0x383})

32m24.010217561s ago: executing program 1 (id=98):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x9, 0x8080000, 0x1, r2})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000380)=0xa)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r2, 0x2})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x4, 0xfffa}})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x7000000, r2, 0x6})
ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f00000001c0)=@arm64)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x20)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000a67000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100014, &(0x7f0000000100)=0xffffffffffffffff})

32m22.878280304s ago: executing program 0 (id=99):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0)
ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xb6)
munmap(&(0x7f0000ca0000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000640)=[@code={0xa, 0x84, {"0000200a008008d5007008d580be9cd20000b0f2610180d2c20180d2030080d2040080d2020000d400f8a02e207c94d20080b0f200c0df0d020080d2030080d2c40080d2020000d400cd9dd20020b0f2410080d2c20180d2430180d2040080d2020000d4008008d5000008d5008008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x5, 0x5}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x202}}, @svc={0x122, 0x40, {0x84000007, [0x0, 0x1, 0xbcdf, 0xe3, 0x7]}}, @svc={0x122, 0x40, {0x2, [0xd, 0x3, 0x4, 0x4fe, 0x6]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x2c0}}, @mrs={0xbe, 0x18}, @irq_setup={0x46, 0x18, {0x3, 0x152}}, @hvc={0x32, 0x40, {0x8, [0x4, 0x4b8, 0x7, 0x1, 0x6]}}, @irq_setup={0x46, 0x18, {0x4, 0xd8}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0xb, 0x5, 0x6}}, @svc={0x122, 0x40, {0x4000000, [0x4, 0x3, 0x101, 0x8, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x7000, 0x41a, 0x200000000, 0x6}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0x2, 0x1, 0x6, 0x1}}, @svc={0x122, 0x40, {0xc4000010, [0x200000000000ab, 0x10, 0x29, 0x3ff, 0x1]}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x0, 0x7, 0x128c63c92127ea5f}}, @svc={0x122, 0x40, {0x30000000, [0x2, 0xb4, 0x5, 0x100, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xa, 0x5000, 0x608, 0x2}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x2db}}, @mrs={0xbe, 0x18, {0x603000000013e510}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x671}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xffe8, 0x2, 0x12}}, @hvc={0x32, 0x40, {0x2, [0xfffffffffffffff9, 0x0, 0x2, 0xd1, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013defb}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @irq_setup={0x46, 0x18, {0x2, 0x362}}, @irq_setup={0x46, 0x18, {0x2, 0x385}}, @mrs={0xbe, 0x18, {0x603000000013dee5}}, @its_setup={0x82, 0x28, {0x2, 0xffffffffffffffff, 0x158}}], 0x53c}, &(0x7f0000000600)=[@featur2={0x1, 0x76}], 0x1)

32m13.991775597s ago: executing program 1 (id=100):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100014, &(0x7f00000000c0)=0x7ff}) (fail_nth: 1)

32m12.994010568s ago: executing program 0 (id=101):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x5)

32m8.347968393s ago: executing program 1 (id=102):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r2, 0x2})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x110c230000})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r2, 0x6})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0x1})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000))

31m26.878974316s ago: executing program 32 (id=101):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x5)

31m20.391301952s ago: executing program 33 (id=102):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r2, 0x2})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x110c230000})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r2, 0x6})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0x1})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000))

26m15.888480683s ago: executing program 2 (id=103):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfb7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, &(0x7f00000011c0)=@arm64={0x5, 0xff, 0xc, '\x00', 0x1e00000000000})
r14 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000140)={0x9, 0x6})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r14, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000280)=0x16})
ioctl$KVM_ARM_PREFERRED_TARGET(r14, 0x8020aeaf, &(0x7f0000000040))
r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000)
r16 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x6243, 0x5}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r15, 0x1, 0x100)

26m8.480624652s ago: executing program 3 (id=104):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x11)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0xd}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa2) (async)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1a)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff, 0x1}) (async)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r14, 0x4040ae79, &(0x7f0000000000)={0x8ed, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x4000000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)

25m56.881304721s ago: executing program 2 (id=105):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000e) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6001, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f00009ab000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x1})
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x4, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x3}) (async)
munmap(&(0x7f0000c94000/0x1000)=nil, 0x1000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000140)={0x0, &(0x7f0000001b00)=[@code={0xa, 0x84, {"000008d5807c82d200e0b0f2a10080d2620180d2430180d2240080d2020000d400a4ff0d0008202ea05c96d200e0b8f2c10080d2820080d2630180d2040080d2020000d400802088007c4093604c98d200a0b0f2c10180d2220080d2830080d2040080d2020000d4007008d5000008d5"}}], 0x84}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
openat$kvm(0x0, &(0x7f0000000040), 0xa8001, 0x0) (async, rerun: 32)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)

25m56.292059152s ago: executing program 3 (id=106):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0x80111500, 0x20000000)
close(r4)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x40049409, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r7, 0xb})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r7, 0x3})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0xa, 0xffffffffffffffff, 0x1})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
r11 = ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_ccsidr={0x602000000011000e, 0x0})

25m42.856930102s ago: executing program 2 (id=107):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x23)
ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000280))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0x541b, 0xac)
r8 = eventfd2(0x6, 0x800)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r8, 0x9})
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0xc, 0x2}}, @msr={0x14, 0x20, {0x4cfa4b43b32754ce}}, @msr={0x14, 0x20, {0x603000000013ff10, 0x3}}, @svc={0x122, 0x40, {0xc4000012, [0x7, 0x1, 0x9, 0x101, 0x2]}}, @svc={0x122, 0x40, {0x80003fff, [0x6, 0x1000, 0x3, 0x2, 0x5]}}, @smc={0x1e, 0x40, {0x8600ff01, [0x1, 0x0, 0x75e, 0x4a, 0x5]}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0xd496}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0xc, 0x3, 0x7}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x2, 0x0, 0x0, 0x800, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x9, 0x4, 0x1ff, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x9c}}, @msr={0x14, 0x20, {0x6030000000138004, 0x6}}, @uexit={0x0, 0x18, 0x3}, @code={0xa, 0x6c, {"0000c06c0080000f007008d5006783d200c0b8f2a10180d2a20080d2630180d2040180d2020000d4007008d50080df0d40749cd20040b8f2e10180d2020180d2c30080d2240180d2020000d4000028d5007008d500a4004f"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0xe}}, @code={0xa, 0x84, {"c09a9ed20060b0f2e10180d2820180d2a30180d2240180d2020000d40044c01a00f4200e208d94d20080b0f2610080d2420180d2a30180d2c40080d2020000d4007008d50080df0d007008d5007008d500a4800d602993d200c0b8f2410080d2e20080d2a30180d2840180d2020000d4"}}, @code={0xa, 0xb4, {"80f993d200e0b0f2c10080d2a20080d2c30180d2640180d2020000d4007ca09bc0018fd200e0b8f2c10080d2420180d2830180d2c40180d2020000d4008008d50044007f60198ad20000b0f2410080d2a20180d2430180d2640080d2020000d4a0e685d200c0b8f2c10080d2c20180d2430080d2840180d2020000d4e003006b406588d20020b8f2810180d2a20080d2a30180d2440080d2020000d40000641e"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x9, 0x5, 0x8883}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x323}}, @uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013e092}}, @smc={0x1e, 0x40, {0x1, [0x10000, 0x0, 0x10000, 0x1, 0x3c08]}}, @mrs={0xbe, 0x18, {0x603000000013e18d}}, @hvc={0x32, 0x40, {0x30000000, [0x1, 0x8, 0x7, 0x9, 0x1]}}, @code={0xa, 0xb4, {"004695d200c0b0f2410180d2220080d2c30080d2a40180d2020000d4e00b82d200a0b8f2810180d2a20180d2230080d2440180d2020000d400159cd200a0b8f2210180d2620080d2430080d2640180d2020000d4000000fc608b8bd200a0b0f2e10180d2a20180d2a30080d2e40180d2020000d4007008d5000028d50060005e00769fd200a0b0f2810080d2820080d2e30180d2040180d2020000d400a8300e"}}, @uexit={0x0, 0x18, 0x7fffffff}, @svc={0x122, 0x40, {0xc685d2f974b72e81, [0xffff, 0x401, 0x7fffffffffffffff, 0xe6, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013f289}}, @eret={0xe6, 0x18, 0x7}], 0x660}, &(0x7f0000000100)=[@featur2={0x1, 0x11}], 0x1)
close(r6)
syz_kvm_setup_cpu$arm64(r1, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f0000000280)=0x3})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

25m39.964395679s ago: executing program 3 (id=108):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x701fc2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000640)=[@eret={0xe6, 0x18, 0x7}, @svc={0x122, 0x40, {0x84000012, [0x100000000, 0x6, 0x7ff, 0x4, 0x4]}}, @uexit={0x0, 0x18, 0x8}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x100, 0x1, 0x4}}, @msr={0x14, 0x20, {0x603000000013f464, 0x6}}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x80}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x36b}}, @msr={0x14, 0x20, {0x603000000013e710, 0x200}}, @mrs={0xbe, 0x18, {0x603000000013deb1}}, @smc={0x1e, 0x40, {0x32000000, [0x8, 0xbf5, 0xc00, 0x6, 0x7fffffff]}}, @eret={0xe6, 0x18, 0x80}, @svc={0x122, 0x40, {0xc4000003, [0x4, 0x3, 0x2, 0x7ff, 0x1]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x797}}, @code={0xa, 0xcc, {"000008d5e0d48ed20000b0f2610080d2020080d2c30180d2a40080d2020000d480369dd20020b0f2007008d5420080d2630180d2c40080d2020000d4e07c87d20020b0f2810080d2620180d2e30180d2240080d2020000d4e09f9cd20080b0f2a10080d2420180d2830180d2640080d2020000d400b4207e0000204a000008d5604980d200e0b0f2410180d2820080d2630080d2440080d2020000d4206682d20020b0f2e10180d2820180d2a30180d2c40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x6, 0x4}}, @eret={0xe6, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x603000000013c522}}, @irq_setup={0x46, 0x18, {0x3, 0x68}}, @mrs={0xbe, 0x18, {0x50280000001a26c9}}, @irq_setup={0x46, 0x18, {0x1, 0xb0}}, @irq_setup={0x46, 0x18, {0x1, 0x8e}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0xd, 0x906, 0x1c0000, 0x2}}], 0x3cc}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xc6)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r9, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r7, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000})
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r13, 0x4208ae9b, &(0x7f0000000400)={0x1, 0x0, {[0xfffffffffffffffb, 0x3ff, 0x1000, 0xe26f, 0x3, 0x6, 0x9, 0x0, 0x4, 0x5, 0x7, 0x81, 0x0, 0x7fffffffffffffff, 0x1, 0x2], [0x80000001, 0x8, 0x34f, 0x80000001, 0x8000000000000000, 0xfffffffffffffffb, 0x8, 0x5, 0x7ff, 0x6, 0xa87f, 0x1, 0x5, 0x7fffffffffffffff, 0x9, 0x7fffffff], [0x6, 0x2, 0x3, 0xfff, 0xe7, 0x1, 0x100000001, 0x0, 0x8, 0x3ff, 0x8, 0x401, 0x3, 0x3, 0x100000001], [0xe, 0xffffffffffff37a5, 0x80000000, 0x54435a02, 0x2, 0x2, 0x4, 0xff, 0xa4c, 0x2, 0x400, 0x1, 0xfffffffff14d8e2e, 0x44, 0x400, 0xfffffffffffff2f2]}})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010000a, &(0x7f0000000000)=0x10000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

25m18.187955643s ago: executing program 2 (id=109):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x24)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xac)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x8, 0x80, 0x80}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r4, 0x40000)
syz_memcpy_off$KVM_EXIT_MMIO(r11, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)

25m15.154790955s ago: executing program 3 (id=110):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f0000ffe000/0x1000)=nil})
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_vgic_v3_setup(r0, 0x2, 0xa0)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000040)=0x1})
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0))
r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xd4c, 0xf000, 0x4, r3, 0xa})
ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000d31000/0x2000)=nil, 0xfffffffffffffff8, r3})
syz_kvm_add_vcpu$arm64(r1, &(0x7f00000006c0)={0x0, &(0x7f0000000240)=[@mrs={0xbe, 0x18, {0x6030000000138074}}, @code={0xa, 0x9c, {"00c0631e0088205e007008d540ff9dd200e0b8f2210180d2420180d2830080d2440180d2020000d4009e8cd20020b8f2e10080d2620080d2230180d2c40180d2020000d400b689d20080b0f2810180d2c20180d2830180d2840080d2020000d4007008d5000000bd007008d540d184d20060b8f2a10080d2420080d2030080d2640080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e2b0}}, @eret={0xe6, 0x18, 0x6}, @smc={0x1e, 0x40, {0x84000002, [0xb, 0x9, 0x7, 0x4, 0x7]}}, @irq_setup={0x46, 0x18, {0x0, 0x47}}, @uexit={0x0, 0x18, 0x400}, @eret={0xe6, 0x18, 0x1abc}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0xc, 0x6, 0x9f, 0x2}}, @code={0xa, 0x9c, {"007008d500c0e00da0a786d20000b8f2610080d2c20180d2230080d2040080d2020000d400c0631e0000629e40e29cd20040b0f2a10180d2420180d2630080d2c40180d2020000d4005a97d20060b8f2e10080d2020080d2030080d2840180d2020000d4007008d51020201e200f9bd200e0b0f2c10180d2220180d2030180d2840180d2020000d4"}}, @svc={0x122, 0x40, {0x84000052, [0x4, 0x3, 0x5, 0x3, 0x7fffffff]}}, @irq_setup={0x46, 0x18, {0x0, 0x171}}, @msr={0x14, 0x20, {0x603000000013df11, 0x49ba6d11}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x3ab}}, @msr={0x14, 0x20, {0x603000000013c666, 0x100000000}}, @mrs={0xbe, 0x18, {0x5bc4}}, @svc={0x122, 0x40, {0x1, [0xc, 0x9, 0x3, 0xffffffffffffff97, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x1, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x0, 0x4f4c, 0x1}}, @uexit={0x0, 0x18, 0x101}, @msr={0x14, 0x20, {0x603000000013e712, 0x9}}, @svc={0x122, 0x40, {0x8400000e, [0x0, 0x4653, 0x7ff, 0x3, 0x5]}}, @uexit={0x0, 0x18, 0xfffffffffffffffb}, @mrs={0xbe, 0x18, {0x603000000013df4e}}], 0x450}, &(0x7f0000000700)=[@featur2={0x1, 0x40}], 0x1)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3)
r7 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bfa000/0x400000)=nil)
munmap(&(0x7f0000ceb000/0x3000)=nil, 0x3000)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000780)=@attr_arm64={0x0, 0x7, 0x2, &(0x7f0000000740)=0x100})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000007c0)={0x6, 0x8080000, 0x4, 0xffffffffffffffff, 0x4})
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000f80)={0x0, &(0x7f0000000800)=[@msr={0x14, 0x20, {0x6030000000139808, 0x7fff}}, @smc={0x1e, 0x40, {0x10, [0x2, 0x1, 0x89b, 0x6, 0x8]}}, @svc={0x122, 0x40, {0xc4000011, [0x100000000, 0x1ff, 0x8, 0x3, 0xffffffff]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x2, 0x4, 0x1ff, 0x6, 0x2}}, @hvc={0x32, 0x40, {0x84000051, [0xb, 0x7fffffffffffffff, 0x7, 0x4, 0x8000000000000000]}}, @mrs={0xbe, 0x18, {0x603000000013e721}}, @svc={0x122, 0x40, {0x2000, [0x4, 0x7, 0xfffffffffffffffe, 0x3fe0000000000, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xd00, 0x6, 0x8}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0x932, 0xfb}}, @code={0xa, 0x84, {"000c601e000008d50020a00de02083d200a0b0f2410080d2420180d2c30180d2240180d2020000d4007008d5001f8ad20080b0f2610180d2a20180d2630180d2640080d2020000d40044200ea0dd86d20060b8f2010080d2c20180d2630080d2440080d2020000d4008040080000601e"}}, @code={0xa, 0x6c, {"206791d20060b0f2610080d2e20180d2030180d2240080d2020000d400a0e00d000000b81f2003d5006d8fd20040b0f2c10080d2c20080d2030080d2840180d2020000d4e0039fd60024c09a0020601e0014c05a000008d5"}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x2, 0x6, 0x13, 0x4}}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x9c, {"007008d5007008d5008008d5000000ea60238ad20080b0f2a10180d2c20180d2030180d2e40080d2020000d4007008d500ad8ad20000b8f2e10080d2420180d2030080d2840180d2020000d40000400ce04799d200e0b0f2a10180d2220180d2c30080d2a40180d2020000d4a0d892d20020b8f2210180d2820080d2e30080d2440080d2020000d4"}}, @smc={0x1e, 0x40, {0x200, [0x2000000020000000, 0xc, 0x80000001, 0x40, 0x1000]}}, @mrs={0xbe, 0x18, {0x603000000013e6d1}}, @hvc={0x32, 0x40, {0x40000000, [0xdd3, 0x0, 0x8, 0x2, 0x101]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x3e6}}, @code={0xa, 0xb4, {"0034005f000028d5008000c8403f88d200c0b8f2610080d2a20180d2430180d2040080d2020000d400ac200ec0828cd200c0b8f2010080d2820180d2430180d2240180d2020000d4c06781d20060b8f2610180d2020080d2830080d2240180d2020000d480b591d200c0b8f2c10180d2c20080d2c30180d2040180d2020000d4c07589d20000b0f2a10180d2420080d2030180d2a40180d2020000d40000200b"}}, @mrs={0xbe, 0x18, {0x603000000013c2a0}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0xc, 0xa51d, 0x7f, 0x3}}, @uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013df41, 0x2d}}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x517, 0x8000000000000000, 0x7}}, @msr={0x14, 0x20, {0x603000000013df5b, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013df61}}, @code={0xa, 0x6c, {"0024007fe003004b402891d20020b0f2010080d2220180d2e30180d2840080d2020000d4007008d5000000fd000028d5e07581d20060b8f2a10080d2020080d2c30080d2840180d2020000d40030000e000008d50064002f"}}, @smc={0x1e, 0x40, {0x4000000, [0x752df160, 0x3, 0x9, 0x9, 0x50]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc00, 0x244, 0x6}}, @msr={0x14, 0x20, {0x603000000013c039, 0x100000001}}, @code={0xa, 0x84, {"20ed92d200a0b8f2810180d2020080d2030080d2c40080d2020000d4007008d5008008d5a0119fd200a0b0f2a10080d2820080d2230180d2040080d2020000d4007008d5007008d5007008d50000701e000008d540f599d200c0b8f2210180d2220180d2e30180d2640180d2020000d4"}}], 0x760}, &(0x7f0000000fc0)=[@featur2={0x1, 0x8}], 0x1)
close(r6)
ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7)
r9 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000001000)={0x0, 0x4, 0x2, 0x1000, &(0x7f0000ff2000/0x1000)=nil, 0x6, r9})
r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11)
ioctl$KVM_CHECK_EXTENSION_VM(r11, 0xae03, 0x7)

25m7.661178675s ago: executing program 3 (id=111):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xffff1000, 0x6000, 0x80001})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x83)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0x80a0000, 0x0, 0x401, 0x1, 0x3})
ioctl$KVM_CREATE_VM(r7, 0x400454d9, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x1, 0x8000000, 0x2, 0xffffffffffffffff, 0x20})
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x10, r11, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x31)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r17, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010004c, 0x0})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
r18 = eventfd2(0xd, 0x1)
close(r18)

25m2.31502688s ago: executing program 2 (id=112):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f0000000100)=0x10})

24m19.87879625s ago: executing program 34 (id=111):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xffff1000, 0x6000, 0x80001})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x83)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0x80a0000, 0x0, 0x401, 0x1, 0x3})
ioctl$KVM_CREATE_VM(r7, 0x400454d9, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x1, 0x8000000, 0x2, 0xffffffffffffffff, 0x20})
r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x10, r11, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x31)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r17, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010004c, 0x0})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
r18 = eventfd2(0xd, 0x1)
close(r18)

24m14.970477026s ago: executing program 35 (id=112):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x603000000010003e, &(0x7f0000000100)=0x10})

12m58.200776138s ago: executing program 5 (id=146):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x230c02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r6 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r5, 0xa, 0x11, r6, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x10201, 0x6, 0x5000, 0x2000, &(0x7f0000c0c000/0x2000)=nil, 0xfffffffffffffff0, r6})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x6, 0x2000, 0x2000, &(0x7f0000ec1000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1fe, 0xa}})
r16 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})

12m40.896833956s ago: executing program 4 (id=147):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100014, &(0x7f00000000c0)=0x7ff})

12m35.899923434s ago: executing program 5 (id=148):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x101fd, 0x2, 0xdddd1000, 0x1000, &(0x7f0000ecd000/0x1000)=nil})
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_fp={0x60400000001001a4, 0x0})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0)

12m23.973594116s ago: executing program 4 (id=149):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0x2000008, 0x100010, r1, 0x0)
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)

12m16.870292379s ago: executing program 5 (id=150):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000002, 0x11, 0xffffffffffffffff, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async, rerun: 32)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0)

12m15.016350095s ago: executing program 4 (id=151):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r3 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x80)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x6, 0x3, 0x0})
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

12m3.47461892s ago: executing program 5 (id=152):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x2c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x7fffffff})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000000), 0x244802, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, 0x4019032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

12m1.920988317s ago: executing program 4 (id=153):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x200001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7})

11m53.350709081s ago: executing program 4 (id=154):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$arm64(0x0, 0x0, &(0x7f0000000440)=[@featur1={0x1, 0x2a}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_REGS(r2, 0x4360ae82, &(0x7f0000000180)={[0x7, 0x4, 0x7, 0x470, 0x4da, 0x200, 0x2, 0x5, 0x3, 0x1, 0xd, 0x10001, 0x2, 0x5, 0x3], 0xeeee0000, 0x402})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil})

11m38.731044527s ago: executing program 5 (id=155):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000000))
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x5, 0xb, &(0x7f0000000080)=0x2})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x2, 0x213305f1, &(0x7f0000000100)=0x1})
close(r2)
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000001c0)=@arm64_core={0x603000000010004a, &(0x7f0000000180)})
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000200)={0x1, [0x8000000000]})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x1, 0xf, &(0x7f0000000240)=0x8})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000002c0)={0x1, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x4, 0x5, &(0x7f0000000300)=0xfffffffffffffff8})
r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000a00)={0x0, &(0x7f0000000380)=[@code={0xa, 0x9c, {"00c0ff0d000028d500008038a0218dd200c0b8f2010180d2e20080d2430180d2840080d2020000d40070204e40a189d20020b0f2010080d2020080d2030080d2440180d2020000d4007008d5a06a86d20000b0f2e10080d2a20180d2430080d2440180d2020000d460a590d20060b0f2810080d2620080d2e30180d2e40080d2020000d41f00006a"}}, @code={0xa, 0x6c, {"008008d50040c01a0040bf0d008008d5a01b94d200a0b0f2410080d2420180d2c30080d2e40080d2020000d40000407960a683d20020b8f2410080d2020180d2e30080d2840180d2020000d40038000e00a0ff0d007008d5"}}, @eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x6030000000139808, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x44}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0x8, 0xe180, 0x3, 0x1}}, @hvc={0x32, 0x40, {0xc4000001, [0x1, 0x6, 0x5, 0x5, 0x9]}}, @svc={0x122, 0x40, {0x4, [0x10000, 0x121, 0x7, 0x5da6, 0x1]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x207}}, @eret={0xe6, 0x18, 0x1000}, @smc={0x1e, 0x40, {0x84000052, [0x4b75, 0x169, 0xea, 0x2, 0x2c16]}}, @mrs={0xbe, 0x18, {0x603000000013df12}}, @smc={0x1e, 0x40, {0x7100f3a2, [0x115, 0x5, 0x5, 0x1, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x4, 0x1, 0xfffffff8}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x82}}, @hvc={0x32, 0x40, {0x84000014, [0x3ff, 0x8, 0x7, 0x3, 0x200]}}, @msr={0x14, 0x20, {0x603000000013de82, 0x40}}, @irq_setup={0x46, 0x18, {0x4, 0x275}}, @mrs={0xbe, 0x18, {0x603000000013e18d}}, @smc={0x1e, 0x40, {0x400, [0x7, 0xc33a, 0x5, 0x7, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x800, 0x3, 0x5}}, @mrs={0xbe, 0x18, {0x603000000013df53}}, @smc={0x1e, 0x40, {0x40000000, [0x0, 0xfffffffffffff234, 0x7, 0x8, 0xfffffffffffff807]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x3b6}}, @irq_setup={0x46, 0x18, {0x4, 0x2ab}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x18e}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x8}}, @hvc={0x32, 0x40, {0x84000000, [0x7f, 0x7, 0x2, 0xe26, 0x2e]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0x8, 0x2}}, @mrs={0xbe, 0x18}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x9, 0x2}}, @code={0xa, 0x6c, {"0048601e0040200ec0969bd200a0b8f2010180d2820080d2430180d2040180d2020000d4807f8bd20060b0f2410180d2c20080d2230080d2e40080d2020000d40008a03c007008d5002cc01a0098202e007008d5007008d5"}}], 0x644}, &(0x7f0000000a40)=[@featur2], 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000ac0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000a80)=0x3})
r6 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x41010, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000b00)="0fabc9d4f7fa192bae154fe8c7d49b8d13a8e1dc69fb46cd226137feda03904f14003145124a99c91df33ef9894fc8554f74454b04e42ad1c65c43c2b84e184631ee0c732ae28a5d", 0x0, 0x48)
r7 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000001040)={0x0, &(0x7f0000000b80)=[@eret={0xe6, 0x18, 0x6}, @smc={0x1e, 0x40, {0x10, [0xc3dc, 0x5, 0x2a34, 0x10001, 0x6746]}}, @eret={0xe6, 0x18, 0x8}, @smc={0x1e, 0x40, {0x84000012, [0x6, 0x1, 0x5, 0x9, 0x9]}}, @code={0xa, 0x84, {"0084007f007008d5007008d5c0fe9bd20040b0f2210180d2e20080d2630080d2040180d2020000d4007008d5007008d5c0e19fd20020b0f2610180d2220080d2030080d2040180d2020000d4a00e87d20060b0f2c10080d2820080d2030180d2440080d2020000d4000008d50040206e"}}, @svc={0x122, 0x40, {0xc400000c, [0x4, 0x6, 0x4, 0xd, 0xad]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0xfd, 0x3, 0x3, 0x324, 0x6, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x5, 0x7, 0x9, 0x1}}, @eret={0xe6, 0x18, 0x6e5}, @svc={0x122, 0x40, {0x32000000, [0xd99, 0x6b, 0x7f, 0x4032, 0x1]}}, @hvc={0x32, 0x40, {0x86000001, [0x100000000, 0x800, 0x6, 0x5, 0x200]}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x7d}, @code={0xa, 0xb4, {"000008d5809098d200e0b0f2e10080d2c20180d2630180d2e40080d2020000d4000008d5805c95d20020b0f2a10180d2420180d2030180d2640080d2020000d400a8205e008008d5a02082d200e0b8f2e10180d2a20180d2630180d2240080d2020000d420109dd200e0b8f2a10180d2420080d2c30080d2640180d2020000d40000801240299ad20060b8f2e10180d2e20180d2630080d2840180d2020000d4"}}, @hvc={0x32, 0x40, {0x8400000c, [0x7ff, 0x4, 0x9, 0x3, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x7, 0xe}}, @irq_setup={0x46, 0x18, {0x2, 0x46}}, @code={0xa, 0x3c, {"00008013000008d50000202b007008d5001ca02e007008d5002cc09a000028d5000000aa007008d5"}}, @code={0xa, 0xb4, {"60e298d200e0b8f2610180d2a20080d2030080d2240180d2020000d4007008d500a8a12e008a86d20020b8f2210080d2a20180d2030180d2240180d2020000d4a0ad8dd20020b8f2810180d2620080d2c30180d2640180d2020000d400a8a17e20cd86d200a0b8f2210080d2a20080d2230080d2e40080d2020000d4000000f90000299ee07988d20080b0f2210180d2820180d2630180d2640080d2020000d4"}}], 0x4b8}, &(0x7f0000001080)=[@featur1={0x1, 0x6}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000001100)=@attr_other={0x0, 0x10000, 0xb6, &(0x7f00000010c0)=0x9})
ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000001140)={0x1, 0xc58})
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f0000001180)={0x4, 0x6})
r10 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000014c0)={0x0, &(0x7f00000011c0)=[@msr={0x14, 0x20, {0x603000000013c109, 0x915}}, @mrs={0xbe, 0x18, {0x603000000013dee3}}, @svc={0x122, 0x40, {0x10, [0x100000000, 0x101, 0x8, 0xc724, 0x100]}}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0x0, [0x9, 0x8, 0x5, 0x7ff, 0x4]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x400, 0x2, 0x1}}, @eret={0xe6, 0x18, 0xe9}, @irq_setup={0x46, 0x18, {0x1, 0x184}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @generic={0x2, 0x6ab, 0x3}}, @eret={0xe6, 0x18, 0x2174}, @uexit={0x0, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013c527}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x2}, @smc={0x1e, 0x40, {0x80000001, [0x9, 0x1, 0x5, 0x9, 0xabe]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x23a}}, @svc={0x122, 0x40, {0xc8008020, [0xffffffffffffff7f, 0x600d, 0x3, 0x3, 0x8]}}, @smc={0x1e, 0x40, {0x32000000, [0x0, 0x6, 0x7, 0x734, 0x40000]}}], 0x2d8}, &(0x7f0000001500)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000001580)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000001540)={0xb545, 0x6}})
r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000001880)={0x0, &(0x7f00000015c0)=[@code={0xa, 0x54, {"000c80b8000008d5008008d5007008d5208595d200a0b0f2e10180d2e20080d2c30080d2040080d2020000d4008008d5000000f200fc005f000008d500e4a07e"}}, @svc={0x122, 0x40, {0x8, [0xaeb, 0x6, 0x8001, 0x29f66fb, 0xfffffffffffff801]}}, @uexit={0x0, 0x18, 0x80}, @hvc={0x32, 0x40, {0x8000, [0x9, 0x528, 0x3, 0x1a, 0x5]}}, @irq_setup={0x46, 0x18, {0x0, 0x1cc}}, @eret={0xe6, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0xc, 0x8, 0x1, 0x4}}, @uexit={0x0, 0x18, 0x7fffffff}, @irq_setup={0x46, 0x18, {0x3, 0x2c9}}, @hvc={0x32, 0x40, {0x84000051, [0xe, 0x5, 0xb, 0x8, 0xfffffffffffffeff]}}, @irq_setup={0x46, 0x18, {0x0, 0x232}}, @msr={0x14, 0x20, {0x6030000000130205, 0x5}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xc6}, @irq_setup={0x46, 0x18, {0x3, 0x2d}}, @smc={0x1e, 0x40, {0x1000000, [0x7fffffff, 0x2, 0x0, 0x2]}}, @smc={0x1e, 0x40, {0xc5000020, [0x5, 0x1ff, 0x5, 0xb758, 0x1]}}], 0x2b4}, &(0x7f00000018c0)=[@featur2={0x1, 0x10}], 0x1)
ioctl$KVM_SET_REGS(r11, 0x4360ae82, &(0x7f0000001900)={[0x1, 0x3, 0x7, 0x1, 0x0, 0x7, 0x2, 0x2, 0x2, 0x82, 0xfffffffffffffffa, 0xffffffffffff5e80, 0x7fffffff, 0x866, 0x6, 0x3], 0x6000, 0x480})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000019c0)="f4eee6707db9642519aee68ba34565565d3805b800a6bba5d756d6ab468187871cec17aaa74e87b459c2c741842b44817fb4401fcfaa2fe3d18499252d6948aa8b27ae932fbb141b", 0x0, 0x48)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ede000/0x3000)=nil, r12, 0x1, 0x100010, r11, 0x0)

11m37.326512384s ago: executing program 4 (id=156):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010002a, &(0x7f00000000c0)=0xc})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9ba0)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000140)=0x7})

11m29.458937975s ago: executing program 5 (id=157):
mmap$KVM_VCPU(&(0x7f0000003000/0x1000)=nil, 0x930, 0x300000b, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8e000/0x3000)=nil, 0x3000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000f06000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ecf000/0x5000)=nil, 0x0, 0x3000003, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a00ed})
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = eventfd2(0xd, 0x1)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r7, 0x0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

10m49.788274064s ago: executing program 36 (id=156):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010002a, &(0x7f00000000c0)=0xc})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9ba0)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000140)=0x7})

10m38.692841806s ago: executing program 37 (id=157):
mmap$KVM_VCPU(&(0x7f0000003000/0x1000)=nil, 0x930, 0x300000b, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8e000/0x3000)=nil, 0x3000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000f06000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ecf000/0x5000)=nil, 0x0, 0x3000003, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a00ed})
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = eventfd2(0xd, 0x1)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r7, 0x0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

2m33.433842953s ago: executing program 6 (id=162):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100034, &(0x7f0000000000)=0x9})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000200)={0x8001, 0x3})
r9 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x100000, 0x19000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0xeeee8000, 0x101000})
r11 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000180)={0x5, 0x7})
ioctl$KVM_SET_REGS(r10, 0x4360ae82, &(0x7f00000000c0)={[0xa9, 0x2, 0x3, 0x3, 0x11, 0x2, 0xffffffffffff6eab, 0x1, 0x8, 0x9, 0x5, 0x7f, 0x0, 0x400, 0x0, 0x2], 0x10000, 0x40})
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x6, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)

2m29.524385689s ago: executing program 7 (id=163):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3})
r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xeeef0000})
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[@smc={0x1e, 0x40, {0x80003fff, [0x4f, 0xee6, 0x5, 0x3, 0xffffffffffffb345]}}], 0x40}, &(0x7f0000000200), 0x1)
r5 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m11.668734411s ago: executing program 7 (id=164):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r5 = eventfd2(0xd, 0x1)
close(r5)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r5, 0x0, 0x500)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x8})
ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000200)={0xdddd1000, 0x0, 0xfffffffc, 0x1, 0x8})
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x15)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, 0x0})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610f3ff67521cd66f8f1f447d35b20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000003, 0x11, r9, 0x0)
r15 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xb00f2, 0x0)
r16 = ioctl$KVM_CREATE_GUEST_MEMFD(r15, 0xc040aed4, &(0x7f0000000000)={0x80000001, 0x100000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x5, 0x1, 0xeeef0000, 0x2000, &(0x7f0000e34000/0x2000)=nil, 0x4, r16})
close(r1)

2m4.252831035s ago: executing program 6 (id=165):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffb)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
close(r3)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x10000000000000)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffb) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000) (async)
close(r3) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000) (async)
ioctl$KVM_CREATE_VM(r6, 0x541b, 0x10000000000000) (async)

1m51.40653481s ago: executing program 6 (id=166):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (rerun: 64)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0x80111500, 0x20000000)
close(r8) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x41, 0x100) (async)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, 0x0})

1m48.406039879s ago: executing program 7 (id=167):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0xf, 0x9, 0x3, 0x4}}, @its_setup={0x82, 0x28, {0x41, 0x2, 0xe9}}, @svc={0x122, 0x40, {0x80, [0x7, 0x7, 0x400, 0x58, 0x5]}}, @mrs={0xbe, 0x18, {0x6030000000139820}}, @mrs={0xbe, 0x18, {0x603000000013e08a}}, @msr={0x14, 0x20, {0x603000000013c684, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x3a2}}, @msr={0x14, 0x20, {0x603000000013dea5, 0x8}}, @smc={0x1e, 0x40, {0x84000008, [0x5b4, 0xf, 0x80000000, 0x6, 0x8001]}}, @uexit={0x0, 0x18, 0x3}, @svc={0x122, 0x40, {0x80007fff, [0x58, 0x0, 0x4, 0xe1b, 0x2]}}, @eret={0xe6, 0x18, 0x4}, @svc={0x122, 0x40, {0x0, [0x2b, 0x0, 0x7, 0x100, 0xd8]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc00, 0xb, 0xb}}, @smc={0x1e, 0x40, {0xc4000014, [0x40000000000000, 0x9, 0x1, 0x8, 0x5]}}, @hvc={0x32, 0x40, {0xffff, [0x8, 0x93, 0x1, 0xfffffffffffffffa]}}, @code={0xa, 0x54, {"000028d5008008d5000028d5000040b90008603c00a0004f008008d500a0206e00a8a15e60ca96d20040b0f2610080d2c20080d2e30080d2640180d2020000d4"}}, @code={0xa, 0x9c, {"007008d5000028d50000600da05e89d200c0b8f2810080d2620080d2030080d2240080d2020000d4809291d20000b0f2610180d2a20080d2030080d2840180d2020000d480059ad20080b0f2010180d2420180d2030180d2e40180d2020000d4007008d5007008d5004599d200e0b8f2410080d2220080d2030080d2440180d2020000d400c0201e"}}, @smc={0x1e, 0x40, {0x3f000000, [0x2, 0x10001, 0x6, 0x8, 0x4]}}, @eret={0xe6, 0x18, 0x7}, @smc={0x1e, 0x40, {0x3f000000, [0xfff, 0x2, 0x1, 0x4, 0x401]}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x24a, 0x8, 0x2}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x12b}}], 0x4a8}, &(0x7f0000000500)=[@featur2={0x1, 0x26}], 0x1)
ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000540))
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000600)=@x86={0xae, 0x7f, 0x46, 0x0, 0x2, 0x2, 0xc7, 0x5, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x81, 0xb9, 0x3, 0x4, 0x63, '\x00', 0xfd, 0x9})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000680)=@attr_other={0x0, 0x1, 0xc640, &(0x7f0000000640)=0x8})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000b80)=[{0x0, &(0x7f00000006c0)=[@msr={0x14, 0x20, {0x603000000013c081, 0xbb}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x4c4, 0x6, 0xc}}, @eret={0xe6, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x80, 0x4}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x6c}}, @svc={0x122, 0x40, {0x2, [0x7deb, 0x6000000000, 0x7, 0x0, 0x27d]}}, @svc={0x122, 0x40, {0x80003fff, [0x34, 0x7, 0x5, 0x9, 0x18]}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x5, 0x5, 0x9}}, @uexit={0x0, 0x18, 0x9}, @irq_setup={0x46, 0x18, {0x0, 0x16}}, @msr={0x14, 0x20, {0x603000000013df58, 0xffffffffffffffc0}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0x8, 0xe03, 0x1}}, @smc={0x1e, 0x40, {0x2000000, [0x9, 0x9, 0x75, 0x9, 0xd35]}}, @msr={0x14, 0x20, {0x603000000013c608, 0x2}}, @svc={0x122, 0x40, {0x20, [0xc1, 0x7fffffffffffffff, 0x0, 0x3, 0x7f]}}, @smc={0x1e, 0x40, {0x19, [0x8, 0x5, 0x1000, 0xb5, 0x68a4738d]}}, @hvc={0x32, 0x40, {0x8, [0x2, 0x7, 0x9, 0x59, 0xfff]}}, @code={0xa, 0x6c, {"c0a98dd20000b8f2610180d2c20080d2430080d2840080d2020000d400fc005f601081d20000b8f2610080d2220080d2630180d2440180d2020000d4004c207e0020ff0d00c0e21e007008d5007008d50044202e007008d5"}}, @eret={0xe6, 0x18, 0xfffffffffffffffb}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x24c}}, @mrs={0xbe, 0x18, {0x1901}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x3, 0x38, 0x8, 0x1}}, @svc={0x122, 0x40, {0x1f, [0x5, 0x9, 0x4, 0x9]}}, @eret={0xe6, 0x18, 0x4}, @mrs={0xbe, 0x18, {0x603000000013806f}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x0, 0x1}}], 0x4bc}], 0x1, 0x0, &(0x7f0000000bc0)=[@featur2={0x1, 0x53}], 0x1)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000c00))
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000c40)={0x3, 0x5000})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000cc0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000c80)=0x1d})
syz_kvm_vgic_v3_setup(r1, 0x0, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000d00)={0x4, [0x4, 0x8000000000000000, 0x3ff, 0x10000]})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000d40)={0x2, 0xffffffffffffffff, 0x1})
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000d80)={0xd000, 0x4000, 0x7})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000e00)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000dc0)=0x8})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000e40)={0x1})
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000001240)=[{0x0, &(0x7f0000000e80)=[@irq_setup={0x46, 0x18, {0x2, 0x25f}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0x5a6, 0x2, 0xc}}, @hvc={0x32, 0x40, {0x84000001, [0x0, 0xcb, 0x1e2b5a7, 0x5, 0x5]}}, @eret={0xe6, 0x18, 0x2}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0x19a, 0x100000001, 0x9}}, @uexit={0x0, 0x18, 0x4}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x10001, 0xd}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x1}}, @hvc={0x32, 0x40, {0x4000, [0x4, 0x3, 0x7, 0x4, 0xfffffffffffffffa]}}, @uexit={0x0, 0x18, 0x101}, @smc={0x1e, 0x40, {0xffff, [0x0, 0x6, 0x7, 0x7, 0x719]}}, @msr={0x14, 0x20, {0x6030000000138055, 0xd}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x8, 0x0, 0x1}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013802d}}, @uexit={0x0, 0x18, 0x7511}, @eret={0xe6, 0x18, 0xb03}, @code={0xa, 0x54, {"009c005f00000053007c00130024200e00d297d200e0b8f2c10080d2e20080d2230080d2a40180d2020000d40020c01a007008d50000311e00000048000028d5"}}, @irq_setup={0x46, 0x18, {0x0, 0xd8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x7, 0x8}}, @smc={0x1e, 0x40, {0x84000002, [0x3, 0x1000, 0x8, 0x7fffffffffffffff, 0x8]}}, @msr={0x14, 0x20, {0x603000000013c300, 0x41}}], 0x3a4}], 0x1, 0x0, &(0x7f0000001280)=[@featur1={0x1, 0x20}], 0x1)
r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x810, r2, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f00000012c0)="3b2fbddf91000019aca8cdf0c896565ddf2f401cf45b0649", 0x0, 0x18)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000001300)=0x998c)
ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000001340))
ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000001480)={0x0, 0x103000})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000014c0)={0x1, 0x1000})
r6 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000001500)={0x4, 0xd9})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000001540)={0x10004, 0x1, 0x1000, 0x2000, &(0x7f0000cde000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

1m34.948723043s ago: executing program 7 (id=168):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x4})
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)

1m34.11652126s ago: executing program 6 (id=169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0207"])
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r2, 0x40000)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x3, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000})
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = eventfd2(0xfffffffa, 0x800)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r10})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000080)={0x1, 0x2})
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)

1m8.36193965s ago: executing program 7 (id=170):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f000035b000/0x400000)=nil, &(0x7f0000000100)=[{0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013c01c, 0x5}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0xa, 0x7ff, 0x6}}, @hvc={0x32, 0x40, {0x84000000, [0xfffffffffffffff2, 0x7, 0x1, 0x6, 0x10000000]}}, @smc={0x1e, 0x40, {0x84000008, [0x9c, 0x0, 0x9, 0x8, 0xd42]}}], 0xc8}], 0x1, 0x0, &(0x7f0000000140)=[@featur1={0x1, 0x8}], 0x1)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

1m6.429836874s ago: executing program 6 (id=171):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x896e8e1bfd64469f, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r6, 0x2000003, 0x11, r4, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r6, 0x2000009, 0x11, r4, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000a67000/0x400000)=nil) (async)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000a67000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00800, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100048, &(0x7f0000000040)=0x40})
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r6, 0x0, 0x40010, r11, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r6, 0x0, 0x40010, r11, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xa5)

56.400599756s ago: executing program 7 (id=172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r8, 0x2000003, 0x11, r6, 0x0)
r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffa, 0x2, 0x4, 0xffffffffffffffff, 0x8a4fa382f1515d0b})
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r8, 0x2000009, 0x11, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

49.126440119s ago: executing program 6 (id=173):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x10002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0)

8.348332555s ago: executing program 38 (id=172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r8, 0x2000003, 0x11, r6, 0x0)
r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffa, 0x2, 0x4, 0xffffffffffffffff, 0x8a4fa382f1515d0b})
mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r8, 0x2000009, 0x11, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

0s ago: executing program 39 (id=173):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x10002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0)

kernel console output (not intermixed with test programs):

[  390.140441][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.002783][ T3151] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:42963' (ED25519) to the list of known hosts.
[  608.054853][   T25] audit: type=1400 audit(607.280:61): avc:  denied  { name_bind } for  pid=3309 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  609.059094][   T25] audit: type=1400 audit(608.290:62): avc:  denied  { execute } for  pid=3310 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  609.084770][   T25] audit: type=1400 audit(608.300:63): avc:  denied  { execute_no_trans } for  pid=3310 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  631.262219][   T25] audit: type=1400 audit(630.490:64): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  631.300597][   T25] audit: type=1400 audit(630.530:65): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  631.387690][ T3310] cgroup: Unknown subsys name 'net'
[  631.440151][   T25] audit: type=1400 audit(630.670:66): avc:  denied  { unmount } for  pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  631.836929][ T3310] cgroup: Unknown subsys name 'cpuset'
[  631.943721][ T3310] cgroup: Unknown subsys name 'rlimit'
[  632.870321][   T25] audit: type=1400 audit(632.100:67): avc:  denied  { setattr } for  pid=3310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  632.890093][   T25] audit: type=1400 audit(632.110:68): avc:  denied  { mounton } for  pid=3310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  632.919561][   T25] audit: type=1400 audit(632.140:69): avc:  denied  { mount } for  pid=3310 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  634.689177][ T3313] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  634.714264][   T25] audit: type=1400 audit(633.940:70): avc:  denied  { relabelto } for  pid=3313 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  634.748981][   T25] audit: type=1400 audit(633.970:71): avc:  denied  { write } for  pid=3313 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  635.037422][   T25] audit: type=1400 audit(634.260:72): avc:  denied  { read } for  pid=3310 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  635.059492][   T25] audit: type=1400 audit(634.280:73): avc:  denied  { open } for  pid=3310 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  635.136405][ T3310] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  686.120520][   T25] audit: type=1400 audit(685.350:74): avc:  denied  { execmem } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  690.532634][   T25] audit: type=1400 audit(689.760:75): avc:  denied  { read } for  pid=3317 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.543725][   T25] audit: type=1400 audit(689.770:76): avc:  denied  { read } for  pid=3316 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.574098][   T25] audit: type=1400 audit(689.800:77): avc:  denied  { open } for  pid=3317 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.588121][   T25] audit: type=1400 audit(689.810:78): avc:  denied  { open } for  pid=3316 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.668494][   T25] audit: type=1400 audit(689.880:79): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  690.916015][   T25] audit: type=1400 audit(690.130:80): avc:  denied  { module_request } for  pid=3317 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  692.068255][   T25] audit: type=1400 audit(691.290:81): avc:  denied  { sys_module } for  pid=3317 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  721.576478][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.891574][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.107945][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  722.380364][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.457597][ T3317] hsr_slave_0: entered promiscuous mode
[  734.486835][ T3317] hsr_slave_1: entered promiscuous mode
[  735.360269][ T3316] hsr_slave_0: entered promiscuous mode
[  735.393449][ T3316] hsr_slave_1: entered promiscuous mode
[  735.427041][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[  735.431145][ T3316] Cannot create hsr debugfs directory
[  741.003789][   T25] audit: type=1400 audit(740.230:82): avc:  denied  { create } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  741.028528][   T25] audit: type=1400 audit(740.250:83): avc:  denied  { write } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  741.104205][   T25] audit: type=1400 audit(740.330:84): avc:  denied  { read } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  741.252431][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  741.577230][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  741.908670][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  742.291376][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  743.789515][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  743.974635][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  744.168365][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  744.321729][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  757.321863][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.642225][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.272362][ T3317] veth0_vlan: entered promiscuous mode
[  816.682895][ T3317] veth1_vlan: entered promiscuous mode
[  819.369934][ T3317] veth0_macvtap: entered promiscuous mode
[  819.950458][ T3317] veth1_macvtap: entered promiscuous mode
[  820.280677][ T3316] veth0_vlan: entered promiscuous mode
[  821.359277][ T3316] veth1_vlan: entered promiscuous mode
[  823.373776][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.383483][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.561493][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.569696][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  825.440202][ T3316] veth0_macvtap: entered promiscuous mode
[  826.440097][ T3316] veth1_macvtap: entered promiscuous mode
[  826.677465][   T25] audit: type=1400 audit(825.900:85): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  827.012862][   T25] audit: type=1400 audit(826.240:86): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.pVwn7O/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  827.274753][   T25] audit: type=1400 audit(826.500:87): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  827.719284][   T25] audit: type=1400 audit(826.940:88): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.pVwn7O/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  827.959720][   T25] audit: type=1400 audit(827.190:89): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/syzkaller.pVwn7O/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  829.027404][   T25] audit: type=1400 audit(828.250:90): avc:  denied  { unmount } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  829.310672][   T25] audit: type=1400 audit(828.540:91): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  829.322464][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  829.343093][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  829.429905][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.447268][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.546673][   T25] audit: type=1400 audit(828.760:92): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  830.037204][   T25] audit: type=1400 audit(829.260:93): avc:  denied  { mount } for  pid=3317 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  830.256113][   T25] audit: type=1400 audit(829.470:94): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  832.411453][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  833.126343][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  833.137525][   T25] audit: type=1400 audit(832.340:96): avc:  denied  { read write } for  pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  833.157529][   T25] audit: type=1400 audit(832.380:97): avc:  denied  { open } for  pid=3317 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  833.196518][   T25] audit: type=1400 audit(832.420:98): avc:  denied  { ioctl } for  pid=3317 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  843.176885][   T25] audit: type=1400 audit(842.380:99): avc:  denied  { read } for  pid=3468 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  843.247943][   T25] audit: type=1400 audit(842.470:100): avc:  denied  { open } for  pid=3468 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  843.660826][   T25] audit: type=1400 audit(842.890:101): avc:  denied  { ioctl } for  pid=3468 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  845.753821][   T25] audit: type=1400 audit(844.980:102): avc:  denied  { write } for  pid=3470 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  854.931333][   T25] audit: type=1400 audit(854.120:103): avc:  denied  { append } for  pid=3480 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  868.200477][   T25] audit: type=1400 audit(867.370:104): avc:  denied  { execute } for  pid=3486 comm="syz.0.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  869.057251][   T25] audit: type=1400 audit(868.280:105): avc:  denied  { setattr } for  pid=3486 comm="syz.0.5" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  992.813101][ T3574] kvm [3574]: Failed to find VMA for hva 0x21016000
[ 1294.781148][ T3744] kvm [3744]: Failed to find VMA for hva 0x21016000
[ 1295.364313][ T3744] kvm [3744]: Failed to find VMA for hva 0x21016000
[ 1354.331281][ T3788] FAULT_INJECTION: forcing a failure.
[ 1354.331281][ T3788] name failslab, interval 1, probability 0, space 0, times 1
[ 1354.357688][ T3788] CPU: 0 UID: 0 PID: 3788 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT 
[ 1354.358402][ T3788] Hardware name: linux,dummy-virt (DT)
[ 1354.358895][ T3788] Call trace:
[ 1354.359320][ T3788]  show_stack+0x2c/0x3c (C)
[ 1354.361193][ T3788]  __dump_stack+0x30/0x40
[ 1354.361471][ T3788]  dump_stack_lvl+0xd8/0x12c
[ 1354.361678][ T3788]  dump_stack+0x1c/0x28
[ 1354.361892][ T3788]  should_fail_ex+0x570/0x6e0
[ 1354.362170][ T3788]  should_failslab+0xb8/0xec
[ 1354.362474][ T3788]  __kmalloc_noprof+0xdc/0x4b8
[ 1354.362735][ T3788]  tomoyo_realpath_from_path+0xdc/0x628
[ 1354.363028][ T3788]  tomoyo_path_number_perm+0x13c/0x33c
[ 1354.363262][ T3788]  tomoyo_file_ioctl+0x2c/0x3c
[ 1354.363519][ T3788]  security_file_ioctl+0xe8/0x2f0
[ 1354.363784][ T3788]  __arm64_sys_ioctl+0xd0/0x244
[ 1354.364104][ T3788]  invoke_syscall+0x90/0x2b4
[ 1354.364392][ T3788]  el0_svc_common+0x180/0x2f4
[ 1354.364697][ T3788]  do_el0_svc+0x58/0x74
[ 1354.365020][ T3788]  el0_svc+0x58/0x164
[ 1354.365247][ T3788]  el0t_64_sync_handler+0x84/0x12c
[ 1354.365465][ T3788]  el0t_64_sync+0x198/0x19c
[ 1354.479525][ T3788] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1466.320545][ T3796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1466.641367][ T3796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1472.694786][ T3800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1473.060239][ T3800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1492.687650][ T3796] hsr_slave_0: entered promiscuous mode
[ 1492.743792][ T3796] hsr_slave_1: entered promiscuous mode
[ 1492.814584][ T3796] debugfs: 'hsr0' already exists in 'hsr'
[ 1492.819331][ T3796] Cannot create hsr debugfs directory
[ 1503.572922][ T3800] hsr_slave_0: entered promiscuous mode
[ 1503.682585][ T3800] hsr_slave_1: entered promiscuous mode
[ 1503.789839][ T3800] debugfs: 'hsr0' already exists in 'hsr'
[ 1503.793874][ T3800] Cannot create hsr debugfs directory
[ 1514.867187][ T3796] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1516.057518][ T3796] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1517.231016][ T3796] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1517.708979][ T3796] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1518.159385][ T3360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1519.020347][ T3360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.160539][ T3360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.214447][ T3360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1526.140250][ T3800] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1527.050809][ T3800] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1533.663796][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1533.749683][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1533.833659][ T3360] bond0 (unregistering): Released all slaves
[ 1534.270773][ T3800] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1534.943865][ T3800] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1536.258443][ T3360] hsr_slave_0: left promiscuous mode
[ 1536.333660][ T3360] hsr_slave_1: left promiscuous mode
[ 1536.962748][ T3360] veth1_macvtap: left promiscuous mode
[ 1536.988149][ T3360] veth0_macvtap: left promiscuous mode
[ 1536.997946][ T3360] veth1_vlan: left promiscuous mode
[ 1537.031385][ T3360] veth0_vlan: left promiscuous mode
[ 1562.994024][ T3360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1564.272605][ T3360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.629403][ T3360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1566.613466][ T3360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.082633][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1582.277741][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1582.402100][ T3360] bond0 (unregistering): Released all slaves
[ 1584.576236][ T3360] hsr_slave_0: left promiscuous mode
[ 1584.663335][ T3360] hsr_slave_1: left promiscuous mode
[ 1585.200483][ T3360] veth1_macvtap: left promiscuous mode
[ 1585.219857][ T3360] veth0_macvtap: left promiscuous mode
[ 1585.230895][ T3360] veth1_vlan: left promiscuous mode
[ 1585.244320][ T3360] veth0_vlan: left promiscuous mode
[ 1599.711188][ T3796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1605.032285][ T3800] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1694.363408][ T3796] veth0_vlan: entered promiscuous mode
[ 1695.130136][ T3796] veth1_vlan: entered promiscuous mode
[ 1697.700574][ T3796] veth0_macvtap: entered promiscuous mode
[ 1698.078055][ T3796] veth1_macvtap: entered promiscuous mode
[ 1700.688888][ T3800] veth0_vlan: entered promiscuous mode
[ 1701.447902][   T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.473769][   T21] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.499381][   T21] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.527478][   T21] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.961296][ T3800] veth1_vlan: entered promiscuous mode
[ 1706.229311][ T3800] veth0_macvtap: entered promiscuous mode
[ 1707.093926][ T3800] veth1_macvtap: entered promiscuous mode
[ 1709.778712][ T3396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1709.784387][ T3396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1709.813713][ T3396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1709.849911][ T3396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.948182][ T3873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.053667][ T3873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1851.952972][ T3873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1853.630107][ T3873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.032495][ T3873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1874.130245][ T3873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1874.221366][ T3873] bond0 (unregistering): Released all slaves
[ 1876.750020][ T3873] hsr_slave_0: left promiscuous mode
[ 1876.857147][ T3873] hsr_slave_1: left promiscuous mode
[ 1877.704681][ T3873] veth1_macvtap: left promiscuous mode
[ 1877.800837][ T3873] veth0_macvtap: left promiscuous mode
[ 1877.820860][ T3873] veth1_vlan: left promiscuous mode
[ 1877.857690][ T3873] veth0_vlan: left promiscuous mode
[ 1897.148983][ T3873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.663648][ T3873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1899.774046][ T3873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1900.947994][ T3873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1921.251748][ T3873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1921.571003][ T3873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1921.789844][ T3873] bond0 (unregistering): Released all slaves
[ 1923.696278][ T3873] hsr_slave_0: left promiscuous mode
[ 1923.832941][ T3873] hsr_slave_1: left promiscuous mode
[ 1924.267603][ T3873] veth1_macvtap: left promiscuous mode
[ 1924.271080][ T3873] veth0_macvtap: left promiscuous mode
[ 1924.288381][ T3873] veth1_vlan: left promiscuous mode
[ 1924.297673][ T3873] veth0_vlan: left promiscuous mode
[ 1973.533218][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1973.874687][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1977.443780][ T4063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1977.829647][ T4063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2002.849705][ T4059] hsr_slave_0: entered promiscuous mode
[ 2002.919974][ T4059] hsr_slave_1: entered promiscuous mode
[ 2005.178827][ T4063] hsr_slave_0: entered promiscuous mode
[ 2005.253211][ T4063] hsr_slave_1: entered promiscuous mode
[ 2005.309610][ T4063] debugfs: 'hsr0' already exists in 'hsr'
[ 2005.316976][ T4063] Cannot create hsr debugfs directory
[ 2018.644245][ T4059] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2019.181957][ T4059] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2019.644073][ T4059] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2020.242409][ T4059] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2025.557764][ T4063] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2025.962382][ T4063] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2026.333991][ T4063] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2026.819651][ T4063] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2056.139136][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2061.161127][ T4063] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2189.500685][ T4059] veth0_vlan: entered promiscuous mode
[ 2190.269261][ T4059] veth1_vlan: entered promiscuous mode
[ 2194.203012][ T4063] veth0_vlan: entered promiscuous mode
[ 2194.591030][ T4059] veth0_macvtap: entered promiscuous mode
[ 2195.409849][ T4059] veth1_macvtap: entered promiscuous mode
[ 2196.213652][ T4063] veth1_vlan: entered promiscuous mode
[ 2199.979098][ T3874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2200.032615][ T3874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2200.041103][ T3874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2200.042069][ T3874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2200.930836][ T4063] veth0_macvtap: entered promiscuous mode
[ 2201.898444][ T4063] veth1_macvtap: entered promiscuous mode
[ 2207.376575][   T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.402500][ T3885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.420584][ T3885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.627731][ T3885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2495.289887][ T4471] FAULT_INJECTION: forcing a failure.
[ 2495.289887][ T4471] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2495.378798][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT 
[ 2495.379178][ T4471] Hardware name: linux,dummy-virt (DT)
[ 2495.379300][ T4471] Call trace:
[ 2495.379385][ T4471]  show_stack+0x2c/0x3c (C)
[ 2495.379744][ T4471]  __dump_stack+0x30/0x40
[ 2495.379969][ T4471]  dump_stack_lvl+0xd8/0x12c
[ 2495.380167][ T4471]  dump_stack+0x1c/0x28
[ 2495.380379][ T4471]  should_fail_ex+0x570/0x6e0
[ 2495.380658][ T4471]  should_fail+0x14/0x24
[ 2495.380929][ T4471]  should_fail_usercopy+0x20/0x30
[ 2495.381200][ T4471]  simple_read_from_buffer+0xd0/0x298
[ 2495.381456][ T4471]  proc_fail_nth_read+0x184/0x218
[ 2495.381693][ T4471]  vfs_read+0x220/0x9a8
[ 2495.381915][ T4471]  ksys_read+0x100/0x1f4
[ 2495.382118][ T4471]  __arm64_sys_read+0x98/0xcc
[ 2495.382339][ T4471]  invoke_syscall+0x90/0x2b4
[ 2495.382661][ T4471]  el0_svc_common+0x180/0x2f4
[ 2495.382958][ T4471]  do_el0_svc+0x58/0x74
[ 2495.383233][ T4471]  el0_svc+0x58/0x164
[ 2495.383464][ T4471]  el0t_64_sync_handler+0x84/0x12c
[ 2495.383688][ T4471]  el0t_64_sync+0x198/0x19c
[ 2664.739001][ T3360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2667.544311][ T3360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2669.009585][ T3360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2670.674665][ T3360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2692.414184][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2693.029705][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2693.312073][ T3360] bond0 (unregistering): Released all slaves
[ 2696.060585][ T3360] hsr_slave_0: left promiscuous mode
[ 2696.339124][ T3360] hsr_slave_1: left promiscuous mode
[ 2697.251789][ T3360] veth1_macvtap: left promiscuous mode
[ 2697.276668][ T3360] veth0_macvtap: left promiscuous mode
[ 2697.357925][ T3360] veth1_vlan: left promiscuous mode
[ 2697.371090][ T3360] veth0_vlan: left promiscuous mode
[ 2725.619800][ T3360] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2727.178954][ T3360] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2728.636719][ T3360] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2729.851223][ T3360] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2751.737055][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2752.172259][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2752.480221][ T3360] bond0 (unregistering): Released all slaves
[ 2754.651016][ T3360] hsr_slave_0: left promiscuous mode
[ 2754.682304][ T3360] hsr_slave_1: left promiscuous mode
[ 2754.996330][ T3360] veth1_macvtap: left promiscuous mode
[ 2755.006706][ T3360] veth0_macvtap: left promiscuous mode
[ 2755.010995][ T3360] veth1_vlan: left promiscuous mode
[ 2755.020938][ T3360] veth0_vlan: left promiscuous mode
[ 2807.348292][ T4552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2807.658618][ T4552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2810.526633][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2810.901401][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2843.894402][ T4552] hsr_slave_0: entered promiscuous mode
[ 2843.976670][ T4552] hsr_slave_1: entered promiscuous mode
[ 2846.569988][ T4559] hsr_slave_0: entered promiscuous mode
[ 2846.633201][ T4559] hsr_slave_1: entered promiscuous mode
[ 2846.748544][ T4559] debugfs: 'hsr0' already exists in 'hsr'
[ 2846.757715][ T4559] Cannot create hsr debugfs directory
[ 2863.419403][ T4552] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2863.858325][ T4552] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2864.332232][ T4552] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2865.328412][ T4552] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2869.448632][ T4559] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2870.047099][ T4559] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2870.543149][ T4559] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2871.270449][ T4559] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2903.562389][ T4552] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2910.401101][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3063.608833][ T4552] veth0_vlan: entered promiscuous mode
[ 3064.948213][ T4552] veth1_vlan: entered promiscuous mode
[ 3069.929334][ T4559] veth0_vlan: entered promiscuous mode
[ 3072.029421][ T4552] veth0_macvtap: entered promiscuous mode
[ 3072.340651][ T4559] veth1_vlan: entered promiscuous mode
[ 3073.357451][ T4552] veth1_macvtap: entered promiscuous mode
[ 3079.359489][ T4559] veth0_macvtap: entered promiscuous mode
[ 3080.054338][ T3885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.127689][ T3396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.153263][ T3873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.504183][ T3873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.920668][ T4559] veth1_macvtap: entered promiscuous mode
[ 3088.517846][ T4210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3088.520927][ T4210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3088.627666][ T3396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3088.778572][ T3396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3439.079733][ T4896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3439.811002][ T4896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3453.861278][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3454.398435][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3498.179547][ T4896] hsr_slave_0: entered promiscuous mode
[ 3498.360336][ T4896] hsr_slave_1: entered promiscuous mode
[ 3498.487550][ T4896] debugfs: 'hsr0' already exists in 'hsr'
[ 3498.508865][ T4896] Cannot create hsr debugfs directory
[ 3516.904703][ T4900] hsr_slave_0: entered promiscuous mode
[ 3517.090315][ T4900] hsr_slave_1: entered promiscuous mode
[ 3517.248527][ T4900] debugfs: 'hsr0' already exists in 'hsr'
[ 3517.282702][ T4900] Cannot create hsr debugfs directory
[ 3546.758087][ T4896] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3548.382770][ T4896] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3549.620971][ T4896] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3550.916727][ T4896] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3562.490880][ T4900] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3563.278634][ T4900] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3564.124607][ T4900] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3564.881677][ T4900] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3614.721933][ T4896] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3625.394875][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3682.588266][   T27] INFO: task syz.6.173:4878 blocked for more than 430 seconds.
[ 3682.625955][   T27]       Not tainted syzkaller #0
[ 3682.626878][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3682.627408][   T27] task:syz.6.173       state:D stack:0     pid:4878  tgid:4878  ppid:4552   task_flags:0x400040 flags:0x00000019
[ 3682.628576][   T27] Call trace:
[ 3682.628984][   T27]  __switch_to+0x584/0xb20 (T)
[ 3682.629567][   T27]  __schedule+0x1eec/0x33a4
[ 3682.630074][   T27]  schedule+0xac/0x27c
[ 3682.630568][   T27]  schedule_timeout+0x5c/0x1e4
[ 3682.631024][   T27]  do_wait_for_common+0x28c/0x444
[ 3682.631512][   T27]  wait_for_completion+0x44/0x5c
[ 3682.631998][   T27]  __synchronize_srcu+0x2a4/0x320
[ 3682.632484][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 3682.632942][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 3682.633470][   T27]  kvm_put_kvm+0x6a0/0xfa8
[ 3682.633882][   T27]  kvm_vm_release+0x58/0x78
[ 3682.634376][   T27]  __fput+0x4ac/0x980
[ 3682.634864][   T27]  ____fput+0x20/0x58
[ 3682.856793][   T27]  task_work_run+0x1bc/0x254
[ 3682.857387][   T27]  do_notify_resume+0x1bc/0x270
[ 3682.857867][   T27]  el0_svc+0xb8/0x164
[ 3682.858321][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 3682.858816][   T27]  el0t_64_sync+0x198/0x19c
[ 3682.860272][   T27] 
[ 3682.860272][   T27] Showing all locks held in the system:
[ 3682.860776][   T27] 2 locks held by kworker/u4:1/21:
[ 3682.861340][   T27] 1 lock held by khungtaskd/27:
[ 3682.861693][   T27]  #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 3682.864040][   T27] 2 locks held by kworker/u4:4/49:
[ 3682.864409][   T27]  #0: cdf000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 3683.042893][   T27]  #1: ffff80008ca87c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 3683.044790][   T27] 3 locks held by kworker/u4:6/2125:
SYZFAIL: failed to recv rpc
[ 3683.130245][   T27]  #0: fff0000072d80d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2f0/0x33a4
[ 3683.132173][   T27]  #1: fff0000072d6c548 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 3683.133776][   T27]  #2: fff0000072d6de58 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5c8/0xe7c
[ 3683.267868][   T27] 1 lock held by klogd/3114:
[ 3683.268270][   T27] 2 locks held by getty/3180:
[ 3683.268576][   T27]  #0: f0f0000011d068a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 3683.270258][   T27]  #1: 93ff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 3683.271987][   T27] 1 lock held by sshd-session/3309:
[ 3683.272317][   T27] 2 locks held by syz-executor/3310:
[ 3683.272619][   T27] 3 locks held by kworker/u4:0/3360:
[ 3683.272966][   T27] 3 locks held by kworker/u4:2/3396:
[ 3683.273294][   T27] 3 locks held by kworker/u4:9/3874:
[ 3683.273597][   T27] 3 locks held by kworker/u4:10/3885:
[ 3683.273923][   T27] 3 locks held by kworker/u4:11/4210:
[ 3683.274274][   T27] 3 locks held by kworker/u4:5/4556:
[ 3683.274617][   T27] 3 locks held by kworker/u4:12/4571:
[ 3683.448705][   T27] 2 locks held by syz.7.172/4873:
[ 3683.450530][   T27] 2 locks held by kworker/u4:13/5020:
[ 3683.450995][   T27]  #0: cdf000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 3683.452811][   T27]  #1: ffff8000a8857c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 3683.454650][   T27] 3 locks held by kworker/u4:15/5023:
[ 3683.527542][   T27] 4 locks held by modprobe/5056:
[ 3683.528026][   T27] 3 locks held by dhcpcd-run-hook/5058:
[ 3683.528572][   T27] 
[ 3683.528864][   T27] =============================================
[ 3683.528864][   T27] 
[ 3683.529665][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 3683.535869][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 3683.537255][   T27] Hardware name: linux,dummy-virt (DT)
[ 3683.538132][   T27] Call trace:
[ 3683.538875][   T27]  show_stack+0x2c/0x3c (C)
[ 3683.539907][   T27]  __dump_stack+0x30/0x40
[ 3683.540829][   T27]  dump_stack_lvl+0x30/0x12c
[ 3683.541619][   T27]  dump_stack+0x1c/0x28
[ 3683.542477][   T27]  vpanic+0x22c/0x59c
[ 3683.543370][   T27]  vpanic+0x0/0x59c
[ 3683.544206][   T27]  hung_task_panic+0x0/0x2c
[ 3683.545117][   T27]  kthread+0x794/0x9a0
[ 3683.546035][   T27]  ret_from_fork+0x10/0x20
[ 3683.547992][   T27] Kernel Offset: disabled
[ 3683.548774][   T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f
[ 3683.550028][   T27] Memory Limit: none
[ 3683.554232][   T27] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:35:32  Registers:
info registers vcpu 0

CPU#0
 PC=ffff80008656f3ec X00=0000000000000001 X01=fff0000072d80d18
X02=0000000000000001 X03=ffff80008045cfc0 X04=0000000000000001
X05=0000000000000001 X06=0000000000000000 X07=ffff80008039232c
X08=ffff80008656f3e4 X09=0000000000010002 X10=0000000000ff0100
X11=0000000000010002 X12=0000000000010003 X13=0000000000000028
X14=0000000000004000 X15=00000000000000ff X16=ffff800080000000
X17=fff07fffeb6e6000 X18=ffff80008c1e5088 X19=0000000000000004
X20=ffff800087812800 X21=b1f000000d9b9d88 X22=00000000000000b1
X23=b1f000000d9b9d80 X24=0000000000000001 X25=00000000000000b1
X26=ffff800087812800 X27=00000000000000ff X28=0000000000000028
X29=ffff800080007b70 X30=ffff80008059ea5c  SP=ffff800080007b60
PSTATE=604020c9 -ZC- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=2525252525252525:2525252525252525 Z01=6572207265767265:730073250a0d0a0d
Z02=742065726f6d2072:6f662064656b636f Z03=0000000000000000:00ff00ff00000000
Z04=0000000000000000:000000000f0f0000 Z05=726f6d20726f6620:64656b636f6c6220
Z06=203a29315f657661:6c735f646e6f6220 Z07=206e612073612067:6e6976616c736e45
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000ffffeed65460:0000ffffeed65460 Z17=ffffff80ffffffd8:0000ffffeed65430
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000