last executing test programs:

1h26m1.761551654s ago: executing program 32 (id=18):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r2, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r4, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x10001)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @irqchip={0x2, 0x3}}]})

1h25m53.853235382s ago: executing program 33 (id=19):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@memwrite={0x6e, 0x30, @generic={0x1, 0xdfb, 0x9, 0x1}}], 0x30}, 0x0, 0x0) (async)
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x7fff}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000cdb000/0x3000)=nil, r12, 0x100000d, 0x32, r5, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e9d000/0x1000)=nil, 0x1000) (async)
mmap$KVM_VCPU(&(0x7f0000ef8000/0x2000)=nil, 0x930, 0x2000006, 0xd010, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)

1h19m43.683142438s ago: executing program 34 (id=28):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x5000, 0x0, 0xffffffffffffffff, 0xc})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x4, 0x7, 0x2}})

1h17m29.392195224s ago: executing program 35 (id=40):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@eret={0xe6, 0x18, 0x8}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x2e0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f)
r5 = eventfd2(0x101, 0x800)
write$eventfd(r5, &(0x7f0000000080)=0xfffffffffffffff7, 0x8)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x40000008, 0x0, 0x80}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x31)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c01b, &(0x7f0000000240)=0x4})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)

1h9m51.38192414s ago: executing program 4 (id=58):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x600440, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f00000000c0)=0xfffffffffffffffc})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x14, 0xff}})

1h9m42.68982603s ago: executing program 4 (id=60):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f00000002c0), 0x545001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x7, <r4=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x7, 0x7fffffffffffffff, 0x0})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="7cfaa2bfd6dd76375aa1bde04fceeb33743b07d73b3e9aac", 0x0, 0xffffffffffffff94)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x8030aeb4, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x30b202, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x54, {"007008d5007008d5001c4093007008d50070400c007008d5008008d50008c09a0000407c609a87d20060b0f2e10080d2220080d2a30180d2640080d2020000d4"}}, @hvc={0x32, 0x40, {0x8000, [0x0, 0x16, 0x2, 0x6, 0x3e]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x225}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x0, 0x8, 0x10001, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e609}}], 0xfc}, &(0x7f0000000100)=[@featur2={0x1, 0x68}], 0x1)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
r14 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r13, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x853, 0x0})

1h9m40.596414493s ago: executing program 5 (id=61):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xffffffff, 0x10001, 0x0})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0xfffffffffffffffe)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f0000000000)={0x10001, 0x400, 0xc0, 0x0})

1h9m19.645730933s ago: executing program 4 (id=62):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000600)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0x10, 0x9, 0xe, 0x1}}, @eret={0xe6, 0x18, 0x7}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x10, 0x45, 0xf6, 0x4}}, @eret={0xe6, 0x18, 0xb6d3}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x10, 0x40000, 0x0, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c021}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0xd5}}, @msr={0x14, 0x20, {0x603000000013f290, 0x1ff}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0xe8e, 0x7f, 0xc}}, @memwrite={0x6e, 0x30, @generic={0x6005, 0xbe3, 0x7, 0x4}}, @smc={0x1e, 0x40, {0x84000056, [0x2, 0x8, 0xb, 0x9, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0x3, 0xd0, 0xfffffffe, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x2a0}}, @eret={0xe6, 0x18, 0xd9}, @smc={0x1e, 0x40, {0x8400000d, [0x8, 0x684, 0x0, 0x7a1278af]}}, @hvc={0x32, 0x40, {0x5000000, [0x63d6, 0x2, 0x7, 0x0, 0x4]}}, @eret={0xe6, 0x18}, @smc={0x1e, 0x40, {0x8, [0x3, 0xb, 0x8, 0x4, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013c118}}, @msr={0x14, 0x20, {0x603000000013c02c, 0xffffffffffffffff}}, @irq_setup={0x46, 0x18, {0x0, 0x125}}, @smc={0x1e, 0x40, {0x84000012, [0x1be2, 0x2, 0x8, 0x5de, 0x7]}}], 0x368}, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x1})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454d0, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000180), 0x100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x30)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x20)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r12, 0x4208ae9b, 0x0)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r14, 0x1, 0x100)
ioctl$KVM_SET_GSI_ROUTING(r14, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000067d87492fe4134cc18cdda89ac20d28dd5d753f2424a33977f0e771bb282e661f3894e7f7200"/56])

1h9m18.790215104s ago: executing program 5 (id=63):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x1c6}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x48, 0x10000, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0xc4}}, @smc={0x1e, 0x40, {0x84000052, [0xff, 0xb754, 0x10000, 0x0, 0x4]}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0xa, 0x7, 0x8, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x1ffb0, 0x0, 0x8}}, @code={0xa, 0x9c, {"0000ae9e206785d200e0b0f2e10180d2a20080d2e30080d2040180d2020000d4008008d50080200e40228ad20000b8f2a10080d2a20080d2030080d2e40180d2020000d4000028d5e0b984d20060b0f2610080d2820180d2430080d2240080d2020000d480b291d20040b8f2610080d2c20180d2430080d2e40180d2020000d400c0241e000028d5"}}, @eret={0xe6, 0x18, 0xa3a}, @code={0xa, 0x84, {"809694d20040b0f2410180d2820180d2430180d2640080d2020000d460788ad200a0b8f2410080d2420180d2030180d2e40180d2020000d440e18bd200c0b8f2a10180d2a20080d2e30180d2e40180d2020000d4008008d5007008d5000028d5000400fc000008d50078202e0000c068"}}, @eret={0xe6, 0x18, 0x55d7}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x84}}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x80000000}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x3fc}}, @eret={0xe6, 0x18, 0x2}, @eret={0xe6, 0x18, 0x7f}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x8, 0x8, 0x6, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x1b8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0xb3, 0x4}}, @svc={0x122, 0x40, {0x32000000, [0x3, 0x0, 0xffffffff80000000, 0xffffffffffffffff, 0x9]}}, @hvc={0x32, 0x40, {0x84000012, [0x8, 0x1, 0x7fff, 0x7a, 0x5]}}, @uexit={0x0, 0x18, 0x2ed4}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x2, 0x6, 0x7fff, 0x80000000, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x3, 0xc, 0x10000, 0x5, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x397}}], 0x4b0}, &(0x7f0000000500)=[@featur1={0x1, 0x10}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x1000000, 0x10, r1, 0x0) (async)
r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x300000a, 0x810, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000580)=@attr_other={0x0, 0x8, 0x80000001, &(0x7f0000000540)=0x4}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000005c0)="3f8c2123d45b736ac46750a844fcb8f2dae91d860daaddaebe0796dcafdf96ec5501b0af5d5ad15d4e3a79e0a7f1df6f807979fdb27033274ea83daae3760bb61b0f247a68fac6f8", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r0, 0x2000000, 0x40010, r1, 0x0) (rerun: 64)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000640)) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000006c0)=@attr_other={0x0, 0x6, 0x2, &(0x7f0000000680)=0x3}) (async, rerun: 64)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (rerun: 64)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000700)={0x7}) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000740)={0x5000, 0x11000})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000780)=@attr_pmu_init) (async, rerun: 64)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000007c0)={0x4, 0xc}) (rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x10001, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r6, 0x8, 0x110, r3, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x39)
r7 = eventfd2(0x800, 0x0)
close(r7) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r6, 0x8, 0x80010, r4, 0x0)
r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000840)=[@mrs={0xbe, 0x18, {0x603000000013800d}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x7, 0x2, 0x10001}}, @eret={0xe6, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013c65d}}, @msr={0x14, 0x20, {0x603000000013e300, 0x4}}], 0x98}, &(0x7f0000000940)=[@featur1={0x1, 0x5a}], 0x1)
ioctl$KVM_SET_SREGS(r8, 0x4000ae84, &(0x7f0000000980)={{0x100000, 0xd000, 0x8, 0x4e, 0xec, 0x6, 0x1, 0xa, 0x0, 0x0, 0xf, 0xb}, {0x0, 0x0, 0xe, 0xb, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7, 0x9, 0x1}, {0x8080000, 0x10000, 0x4, 0x0, 0xc, 0xcf, 0xf8, 0xa, 0x8, 0xea, 0x4, 0x2}, {0x8000000, 0xdddd1000, 0xe, 0x72, 0x8, 0x1, 0x1, 0x6, 0x0, 0x7, 0x80, 0x6}, {0xdddd1000, 0x5000, 0xf, 0x6, 0x3, 0x4c, 0x93, 0x1a, 0x5, 0x6, 0xd, 0x40}, {0x2000, 0xd000, 0x6, 0x15, 0x1, 0xef, 0x2, 0x2, 0x30, 0x2, 0x9, 0xbc}, {0x8080000, 0xeeee0000, 0x4, 0xd, 0x6, 0x1, 0xaa, 0x6, 0xf, 0x7, 0xf8, 0x8}, {0xffff1000, 0x4000, 0xa, 0x9, 0x10, 0x3, 0x2, 0x3, 0x7f, 0xf7, 0x7, 0x4}, {0xeeee0000, 0x9}, {0x8080000, 0x9}, 0x10, 0x0, 0x1000, 0x40004, 0x1, 0x2000, 0x10000, [0x6, 0xb41, 0x9, 0x8]})
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000ac0)) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000b00)={0x2, 0x5}) (async, rerun: 32)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000b80)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000b40)=0xc7}) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000c00)=@arm64_fp={0x60400000001000bb, &(0x7f0000000bc0)=0x1ff})

1h9m7.640405256s ago: executing program 5 (id=64):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x324}}, @hvc={0x32, 0x40, {0x2, [0x8, 0x1, 0x4, 0x0, 0x7]}}, @smc={0x1e, 0x40, {0x84000008, [0xfffffffffffff001, 0x2, 0x3]}}, @msr={0x14, 0x20, {0x603000000013c4cb, 0x2}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x113}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x48, 0x1, 0xe}}, @irq_setup={0x46, 0x18, {0x1, 0x89}}, @memwrite={0x6e, 0x30, @generic={0x6000, 0xafb, 0x8001, 0x1}}, @msr={0x14, 0x20, {0x603000000013e64b, 0x8c}}, @mrs={0xbe, 0x18, {0x60300000001383f6}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x8, 0x5, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x1, 0xf, 0x2c}}, @svc={0x122, 0x40, {0x18400805e, [0xd84, 0xd99, 0x5, 0x3, 0x7]}}, @code={0xa, 0x6c, {"008008d5008008d50020df0d0008607c80e38fd20080b0f2e10180d2620080d2430180d2040080d2020000d4007008d50058202e0050204e40d895d20080b0f2810180d2420080d2c30180d2840180d2020000d41f00002b"}}, @eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0x3f000000, [0x34b, 0xff, 0x10, 0x1, 0x80000001]}}, @smc={0x1e, 0x40, {0x84000005, [0x5, 0xb, 0x4, 0x6, 0xecf]}}, @code={0xa, 0x84, {"e0f19fd20040b0f2e10080d2020080d2a30080d2440080d2020000d4e0879ed200c0b8f2010080d2020180d2830080d2240180d2020000d4008008d50084200e007008d50080401f00f8b07e007008d50080601f005995d20000b8f2810180d2e20080d2230180d2a40080d2020000d4"}}], 0x3d8}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0x80811501, 0x20000000)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x254a80, 0x0) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r10, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) (async)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r14 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 32)
syz_kvm_assert_syzos_uexit$arm64(r14, 0xffffffffffffffff) (rerun: 32)
syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000a40)=[{0x0, &(0x7f00000005c0)=[@irq_setup={0x46, 0x18, {0x3, 0x165}}, @msr={0x14, 0x20, {0x603000000013e642, 0x8}}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0xb}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013dee3}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x2, 0x0, 0xaa}}, @hvc={0x32, 0x40, {0x84000004, [0x1, 0x7, 0x2c9, 0x3, 0xa197]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x4, 0x80000000, 0x0, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013ff11}}, @msr={0x14, 0x20, {0x603000000013e08e, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x80, 0x5, 0x7}}, @irq_setup={0x46, 0x18, {0x2, 0x13e}}, @smc={0x1e, 0x40, {0x86000000, [0x1, 0x6, 0x4, 0x9, 0x7fffffffffffffff]}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x17f}}, @svc={0x122, 0x40, {0xc4000053, [0x4, 0x81, 0x2, 0x0, 0x5]}}, @uexit={0x0, 0x18, 0x400}, @smc={0x1e, 0x40, {0x84000005, [0x4, 0x3, 0x9, 0xfff, 0xe]}}, @smc={0x1e, 0x40, {0xffff, [0x46, 0x3, 0xe3, 0x41, 0x100000001]}}, @eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x91}}, @memwrite={0x6e, 0x30, @generic={0x6000, 0x800, 0x8001}}, @uexit={0x0, 0x18, 0xb43}, @mrs={0xbe, 0x18, {0x603000000013dee6}}, @hvc={0x32, 0x40, {0x40, [0x9, 0x2, 0x9, 0x10, 0x6]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x30b}}, @svc={0x122, 0x40, {0xc400000d, [0x0, 0x9, 0x2, 0x80000001, 0x80000001]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x4, 0x9, 0x7f, 0xd}}], 0x480}], 0x1, 0x0, &(0x7f0000000a80)=[@featur1={0x1, 0x4}], 0x1) (async)
r15 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x80000000, 0x1, 0x2}}) (async)
ioctl$KVM_CAP_ARM_USER_IRQ(r15, 0x4068aea3, &(0x7f0000000080)) (async, rerun: 64)
ioctl$KVM_CHECK_EXTENSION_VM(r15, 0xae03, 0x83) (rerun: 64)

1h8m38.242275436s ago: executing program 4 (id=65):
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
close(r3)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0xa0})
close(r4)
r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x0, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
close(r1)
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[], 0x30}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
close(r3) (async)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0xa0}) (async)
close(r4) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x0, 0x16831, 0xffffffffffffffff, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async)
close(r1) (async)

1h8m37.624674222s ago: executing program 5 (id=66):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x9, 0x1, 0x0})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x5452, 0x3b)

1h8m24.542450499s ago: executing program 5 (id=67):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x7f]})

1h8m20.162558366s ago: executing program 4 (id=68):
munmap(&(0x7f0000df1000/0x1000)=nil, 0x1000) (async, rerun: 32)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) (rerun: 32)
syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000b20000/0x400000)=nil) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000d66000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000fad000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000200)=0xa}) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000000, 0x4d832, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_GET_REGS(r5, 0x8360ae81, &(0x7f0000000140)) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r2, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

1h8m8.620020559s ago: executing program 4 (id=69):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

1h8m8.305615392s ago: executing program 5 (id=70):
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r6, 0x3, 0x11, r4, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000eec000/0x2000)=nil, r6, 0x2000006, 0x1010, r7, 0x0)
r8 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r8, 0x2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x4, r8, 0x6})
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)})
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xdb, 0x8, 0x3, '\x00', 0x1})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

1h7m20.63303776s ago: executing program 36 (id=69):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

1h7m13.60235971s ago: executing program 37 (id=70):
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r6, 0x3, 0x11, r4, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000eec000/0x2000)=nil, r6, 0x2000006, 0x1010, r7, 0x0)
r8 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r8, 0x2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x4, r8, 0x6})
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)})
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xdb, 0x8, 0x3, '\x00', 0x1})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

42m22.711988164s ago: executing program 6 (id=188):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0xc0980, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r4})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async)
r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
close(r7)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) (async)
r9 = eventfd2(0x7, 0x1)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r9, 0xd})

42m8.882369413s ago: executing program 6 (id=190):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x8000}) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, r4, 0xf, 0x8032, 0xffffffffffffffff, 0x0)

41m56.499751505s ago: executing program 6 (id=192):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x1, 0x18000, 0x1})

41m44.519791515s ago: executing program 6 (id=193):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x31}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x4, 0x0})

41m33.033878551s ago: executing program 6 (id=195):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x24a042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xa, <r2=>0xffffffffffffffff}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r8 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r8, 0x8}) (async)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x7000000, r8, 0x6}) (async)
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x40001, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0xc4000053, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0xa, <r12=>0xffffffffffffffff, 0x1})
r13 = ioctl$KVM_CREATE_VM(r12, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xb701, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0xffffffff, 0x7, &(0x7f0000000080)=0xfffffffffffffff7}) (async)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r14, 0x1000000, 0x20010, r15, 0x0)

41m16.070297696s ago: executing program 6 (id=196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000000)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x169880, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0x5450, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x13, r13, 0x40000)
r14 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x7, 0xbe}})
r18 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r18, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})

40m28.192047366s ago: executing program 38 (id=196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000000)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x169880, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0x5450, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x13, r13, 0x40000)
r14 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x7, 0xbe}})
r18 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r18, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})

39m30.731901263s ago: executing program 7 (id=204):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000000)={0x1, 0x84})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x6, 0x6, 0x401, 0x3}}, @svc={0x122, 0x40, {0x400, [0x2, 0x8, 0x5]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x2bd}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x6c, {"007008d5007008d500082038e0a892d200c0b0f2610080d2620180d2630080d2440180d2020000d40010206e007008d50040261e60979ad20060b8f2a10080d2420180d2e30180d2c40180d2020000d4007008d50080000c"}}, @msr={0x14, 0x20, {0x603000000013da16, 0xfffffffffffffffe}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x100, 0x8, 0x2}}, @hvc={0x32, 0x40, {0xc4000003, [0x2e1, 0xd, 0x6380000000000, 0x1, 0x547]}}, @mrs={0xbe, 0x18, {0x603000000013df6c}}, @code={0xa, 0x84, {"c0b794d200e0b0f2210080d2e20180d2230180d2640080d2020000d40000002f0068284e0000439e000008d5007008d5e02291d20020b8f2810180d2620180d2830180d2640180d2020000d41f2003d50090802fc0e08fd20060b0f2010080d2620180d2630180d2240180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0x10, 0x3, 0x7272, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x323}}, @irq_setup={0x46, 0x18, {0x1, 0x37a}}, @irq_setup={0x46, 0x18, {0x2, 0x229}}, @smc={0x1e, 0x40, {0x84000014, [0x3ff, 0x1, 0x1, 0x5, 0x101]}}, @msr={0x14, 0x20, {0x60300000001380a4, 0x8000000000000000}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0xf, 0x4, 0x80}}, @mrs={0xbe, 0x18}, @eret={0xe6, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x603000000013deba}}, @hvc={0x32, 0x40, {0xc4000007, [0xfff, 0x8000000000000000, 0x101, 0x9, 0x2]}}, @hvc={0x32, 0x40, {0xc1007f81, [0x6, 0x4, 0x2, 0xd4, 0x7]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x17b}}, @irq_setup={0x46, 0x18, {0x0, 0x41}}, @msr={0x14, 0x20, {0x603000000013c2a5, 0x7b07}}, @eret={0xe6, 0x18, 0x986f155400000}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x3f5}}, @msr={0x14, 0x20, {0x603000000013c699, 0xff}}, @eret={0xe6, 0x18, 0x2}, @eret={0xe6, 0x18, 0x81}, @code={0xa, 0xb4, {"20909ed200e0b8f2a10180d2420180d2a30180d2440080d2020000d4007008d5e03d82d20000b8f2a10180d2020080d2230180d2240080d2020000d4e0030032e04d84d20080b0f2210180d2220180d2c30080d2640080d2020000d4007008d5000028d560f78fd20060b0f2610080d2020180d2c30180d2e40180d2020000d4007008d5a0fd9fd20080b0f2c10180d2820180d2430080d2240080d2020000d4"}}], 0x5a4}, &(0x7f0000000180)=[@featur1={0x1, 0x1}], 0x1)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000200)=0x7f})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r7, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x5)
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100010, &(0x7f0000000100)})
ioctl$KVM_SET_GUEST_DEBUG_arm64(0xffffffffffffffff, 0x4208ae9b, &(0x7f00000002c0)={0x0, 0x0, {[0xe10, 0x5, 0x400, 0x3, 0x9, 0x4c, 0x4, 0x7, 0x1, 0x7de5cbb4, 0x1, 0xff, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6], [0xe, 0x101, 0x4, 0x61b, 0x80000000, 0x9, 0x7fff, 0x400, 0x9, 0x80, 0xa7, 0x7, 0x80, 0xffffffffffffff26, 0x7, 0x1], [0x2, 0x1, 0x400, 0x8001, 0xffffffffffffffff, 0x2, 0x80, 0x7, 0x3ff, 0x2e8, 0x200, 0x44, 0xf, 0x0, 0x1, 0x3], [0x8001, 0x4800000, 0x3, 0x1, 0xffffffff, 0x4, 0x40, 0x4, 0xa, 0xe, 0x8, 0x78, 0x20000000000, 0x1, 0x4, 0xfffffffffffffff8]}})
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)

39m12.224495732s ago: executing program 7 (id=205):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0xc4000053, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfd000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=[@smc={0x1e, 0x40, {0x84000012, [0x9, 0x8000000000000000, 0xe1, 0x9e2, 0x1000]}}, @mrs={0xbe, 0x18, {0x603000000013e281}}, @msr={0x14, 0x20, {0x603000000013e706, 0x5}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0x10, 0x7, 0x7bfbc72c, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @hvc={0x32, 0x40, {0x8600ff01, [0x10, 0x1, 0xffffffffffffa760, 0x1, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0xc, 0x1, 0x6, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff0, 0x5, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xc0, 0x5}}, @smc={0x1e, 0x40, {0x84000052, [0x5, 0xfffffffffffffff8, 0x4, 0x9, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x100, 0x5, 0x1}}, @svc={0x122, 0x40, {0x80000002, [0x27ac80000000, 0x4, 0x7, 0x100000000, 0xffffffffffff8000]}}, @svc={0x122, 0x40, {0x2, [0xad8, 0x7, 0x8e4, 0x6, 0x52]}}, @hvc={0x32, 0x40, {0x8400000c, [0x7, 0x4, 0x0, 0x1, 0x63ca]}}, @irq_setup={0x46, 0x18, {0x3, 0x3a6}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0x1, 0x4}}, @svc={0x122, 0x40, {0x84000004, [0x8dd5, 0x7f, 0x100, 0x5, 0x3]}}, @msr={0x14, 0x20, {0x603000000013c03a, 0x9}}, @smc={0x1e, 0x40, {0xc4000007, [0xd, 0xff, 0x7fffffffffffffff, 0x2]}}, @irq_setup={0x46, 0x18, {0x1, 0xa5}}, @svc={0x122, 0x40, {0x84000012, [0x7ff, 0x3, 0x2, 0x9, 0x100]}}, @eret={0xe6, 0x18, 0x1a00000000}, @memwrite={0x6e, 0x30, @generic={0x1000, 0xf83, 0x2, 0x7}}, @eret={0xe6, 0x18, 0x7f}, @msr={0x14, 0x20, {0x603000000013e602, 0x9}}], 0x488}, &(0x7f0000000040)=[@featur2={0x1, 0x80}], 0x1)
syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000880)=[@hvc={0x32, 0x40, {0x84000013, [0x2, 0x7, 0x0, 0x0, 0x4]}}, @msr={0x14, 0x20, {0x6030000000138065, 0x5}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x16c}}, @svc={0x122, 0x40, {0x4000000, [0x8, 0x8, 0xe, 0x2, 0x7ff0000000000]}}, @hvc={0x32, 0x40, {0x84000003, [0x120000000000, 0xfffffffffffffff7, 0x2, 0x4, 0x6]}}, @svc={0x122, 0x40, {0x8400000b, [0x2, 0x7, 0x7fffffff, 0x1ff, 0x5]}}, @hvc={0x32, 0x40, {0x8c00801a, [0x7, 0x1, 0x81, 0xffffffff, 0x5]}}, @eret={0xe6, 0x18, 0x3}, @smc={0x1e, 0x40, {0x200, [0xfffffffffffffff9, 0xfffffffffffffffd, 0x7, 0x6, 0x2]}}, @irq_setup={0x46, 0x18, {0x1, 0x331}}], 0x1f8}], 0x1, 0x0, &(0x7f00000000c0)=[@featur1={0x1, 0x10}], 0x1)

38m58.875565446s ago: executing program 7 (id=206):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x1000000, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)

38m42.311350706s ago: executing program 7 (id=207):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xc4}, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0xd}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa2)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1a)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

38m24.616147887s ago: executing program 7 (id=208):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0xfffffffa, 0x401})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36)
ioctl$KVM_CREATE_VM(r3, 0x400454ce, 0x110c230008)

38m13.669673463s ago: executing program 7 (id=209):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xf3)
close(r8)

37m25.523548874s ago: executing program 39 (id=209):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100024, &(0x7f0000000140)=0x7})
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xf3)
close(r8)

29m16.640550509s ago: executing program 8 (id=216):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013d000, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae03, 0xbb)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

28m58.134468212s ago: executing program 8 (id=217):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000140)={0x2, 0xf3})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x40800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100034, &(0x7f0000000100)=0x3})
r8 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffefc)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x11106000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f00000000c0)=0x2})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0x80111500, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r13, 0x541b, 0x2000001c)
r14 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2c)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)

28m37.772865594s ago: executing program 9 (id=210):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@smc={0x1e, 0x40, {0x84000006, [0x8, 0xffffffff00000001, 0x8, 0x3, 0x9]}}, @irq_setup={0x46, 0x18, {0x2, 0x95}}, @msr={0x14, 0x20, {0x603000000013df74, 0xc000000000000}}, @msr={0x14, 0x20, {0x603000000013c528, 0x3}}, @smc={0x1e, 0x40, {0x40000000, [0x982, 0x1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x3, 0xdb, 0x7, 0x4}}, @eret={0xe6, 0x18, 0x5da4}, @irq_setup={0x46, 0x18, {0x0, 0xba}}, @irq_setup={0x46, 0x18, {0x0, 0x88}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x7, 0x47, 0x5, 0x4}}, @mrs={0xbe, 0x18, {0x6030000000138067}}, @hvc={0x32, 0x40, {0xc5000021, [0x3, 0x6, 0x3, 0xffff, 0x1ff]}}, @hvc={0x32, 0x40, {0x1, [0x4, 0x7, 0x8, 0x8, 0x5]}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x6, 0x3, 0x2, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0xb, 0x8}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x0, 0x9, 0x1, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013df45}}, @uexit={0x0, 0x18, 0x5}, @smc={0x1e, 0x40, {0x2, [0xff, 0x2, 0x6, 0x4, 0x5]}}, @uexit={0x0, 0x18, 0x4}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x2, 0x9, 0xed8}}, @hvc={0x32, 0x40, {0x84000014, [0x0, 0x6, 0x0, 0x2, 0xc6]}}, @mrs={0xbe, 0x18, {0x603000000013d801}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x0, 0x1}}, @svc={0x122, 0x40, {0x86000000, [0x0, 0x6, 0x8, 0xfffffffffffffff8, 0x9]}}, @smc={0x1e, 0x40, {0x84000003, [0x1, 0xffffffffffffffff, 0xe, 0x6, 0xed26]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x1, 0x2, 0x7, 0xffffffff, 0x3}}], 0x498}, &(0x7f0000000100)=[@featur1={0x1, 0xd}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x0, 0x48, 0x81, 0x0, 0x1, 0x9, 0x6, 0x2, 0x0, 0x4, 0x37, 0x3, 0x0, 0x5, 0xd3, 0x3, 0x0, 0xa, 0x80, '\x00', 0x9, 0xfffffffffffff57b}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x80811501, 0x20000000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3f, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

28m27.64019792s ago: executing program 8 (id=218):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000000c0)}) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r16 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000140)={0x4, <r17=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r17, 0x800454e1, 0x110c230004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0)

28m19.750287645s ago: executing program 9 (id=219):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000d, [0x99b, 0x100000003, 0x5, 0x101]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xb1)

28m2.254401s ago: executing program 8 (id=220):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000380)=@attr_other={0x0, 0x5, 0x0, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r8, 0x800454e1, 0x110c230004)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r13, 0x0, 0x3c0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r16 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x287, 0x0})
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_PTP_KVM(r10, 0x4068aea3, &(0x7f00000001c0))
close(r4)

28m0.75986432s ago: executing program 9 (id=221):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa2)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x5000, 0x2000, &(0x7f0000fa4000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1})

27m42.730141292s ago: executing program 9 (id=222):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x400a00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x1000004, 0x11, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000000)={0x0, 0x100, 0x1c0, 0x0})
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0xfffffffffffffffe}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000003f0000000300000001000000000000000200000000000000010000000000000009000000f70000000000000009000000"])
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x26)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0xf)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x9}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x580)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_RUN(r15, 0x4000ae8d, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

27m33.513710679s ago: executing program 8 (id=223):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0)
close(r3)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a1e000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r5, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

27m13.463145667s ago: executing program 9 (id=224):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@memwrite={0x6e, 0x30, @generic={0x80a0000, 0xf8c, 0x8, 0xf}}], 0x30}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

27m8.324467018s ago: executing program 8 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x10000, 0x1, 0x1, 0x0, @adapter={0x7b, 0x9, 0x0, 0x443, 0x408}}]})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)

26m52.930065547s ago: executing program 9 (id=226):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x1, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r7 = eventfd2(0x8801, 0x800)
r8 = eventfd2(0x3ff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r8, 0x5, 0x2, r8})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x5, 0x2, r8})
r9 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)

26m21.992156591s ago: executing program 40 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x10000, 0x1, 0x1, 0x0, @adapter={0x7b, 0x9, 0x0, 0x443, 0x408}}]})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)

26m1.809410738s ago: executing program 41 (id=226):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x1, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r7 = eventfd2(0x8801, 0x800)
r8 = eventfd2(0x3ff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r8, 0x5, 0x2, r8})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x5, 0x2, r8})
r9 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)

15m4.372296781s ago: executing program 0 (id=235):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000000)) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})

14m55.502481585s ago: executing program 1 (id=236):
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 64)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async, rerun: 64)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async)
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000400)=[@irq_setup={0x46, 0x18, {0x1, 0x18b}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0x10, 0x1ff, 0x2, 0x3}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @generic={0x4000, 0xbd1, 0x7, 0x5}}, @code={0xa, 0x6c, {"0000591e007008d50000241e007008d580959fd200a0b0f2a10180d2420080d2430080d2040180d2020000d400f4006f007008d540c18ad20040b0f2c10080d2c20180d2e30180d2c40080d2020000d40000031e0060a00d"}}, @eret={0xe6, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x1, 0x36}}, @msr={0x14, 0x20, {0x603000000013df70, 0xffffffffffffffff}}, @smc={0x1e, 0x40, {0x8400000f, [0xfffffffffffffffc, 0x5, 0xffff, 0x8001, 0x2]}}], 0x184}, &(0x7f0000000240)=[@featur1={0x1, 0x20}], 0x1) (async, rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0xc018ae85, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r7 = mmap$KVM_VCPU(&(0x7f0000fe1000/0x3000)=nil, r2, 0x1, 0x80010, r6, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f0000000080)="7cfaa2bfd6dd76375aa1bde04fceeb33743b07d73b3e9aac", 0x0, 0x18)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r2, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
munmap(&(0x7f0000e9d000/0x1000)=nil, 0x1000) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 64)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (async, rerun: 64)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)=0x4}) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

14m45.591510306s ago: executing program 0 (id=237):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000480)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x1}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xce1, 0x9}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0xe}}, @msr={0x14, 0x20, {0x6030000000139828, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df72, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @uexit={0x0, 0x18, 0x4}], 0x128}, &(0x7f0000000440)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0x0, 0x1})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000a05000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x27)
r12 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0xfffffffffffffffc, 0x8}}], 0x30}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_vgic_v3_setup(r15, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR(r16, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x2, 0x0})
ioctl$KVM_GET_REGS(r13, 0x8360ae81, &(0x7f0000000380))

14m40.566898033s ago: executing program 1 (id=238):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c600, 0xfefefee0}}], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x3534c1, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) (async)
r9 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, &(0x7f0000000000)=0x4})

14m19.802640698s ago: executing program 1 (id=239):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x842, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x8000000, 0x2, 0xffffffffffffffff, 0x20})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000280)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000240)=0x7fffffffffffffff})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r12, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x0, 0x0})
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_HALT_POLL(r17, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x5af})
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)

14m17.700072815s ago: executing program 0 (id=240):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x52)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, <r4=>0xffffffffffffffff})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r9, 0x4068aea3, &(0x7f0000000000)={0xef, 0x0, 0x7})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, 0x0})
r10 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x5421, &(0x7f00000000c0)=@attr_arm64={0x0, 0x9, 0x1, &(0x7f0000000040)=0xab})

13m45.102935729s ago: executing program 0 (id=241):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000280)={0xa8, 0x0, 0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000300)=[@eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0xe, 0x7}}, @irq_setup={0x46, 0x18, {0x1, 0x190}}, @svc={0x122, 0x40, {0x84000011, [0x0, 0xffff, 0x8, 0xfffffffffffffff3, 0x7]}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x85}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x2, 0xc, 0x10001, 0xd}}, @irq_setup={0x46, 0x18, {0x0, 0x260}}, @irq_setup={0x46, 0x18, {0x2, 0x331}}, @uexit={0x0, 0x18, 0x10000}, @msr={0x14, 0x20, {0x603000000013c109, 0xfffffffffffff5b6}}, @irq_setup={0x46, 0x18, {0x3, 0xa9}}, @irq_setup={0x46, 0x18, {0x1, 0x2a2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x180, 0x9}}, @smc={0x1e, 0x40, {0x84000001, [0xab1, 0x6, 0x4b19, 0x0, 0x6]}}, @svc={0x122, 0x40, {0x86000000, [0x8, 0x6, 0x1000, 0x7, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x4, 0xf, 0x3, 0x1, 0x4}}, @hvc={0x32, 0x40, {0x5000000, [0x9, 0x8, 0x10000, 0x8, 0xffffffffb48eac37]}}, @svc={0x122, 0x40, {0x3000000, [0x7, 0x3, 0xa3, 0x3, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0x2f8, 0xfffffffffffffff7, 0x2}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x20b}}, @hvc={0x32, 0x40, {0xc4000004, [0x3, 0x8, 0x7, 0x6]}}, @uexit={0x0, 0x18, 0x5}, @smc={0x1e, 0x40, {0x80000001, [0x1000, 0x10, 0x8000000000000001, 0x6, 0xffffffffffffff50]}}, @code={0xa, 0x84, {"0030005f0000209b00fc009b602b8bd20000b8f2610180d2c20180d2c30180d2440080d2020000d4007008d5c0f597d20060b8f2e10180d2c20080d2a30080d2840180d2020000d4000028d520a28dd200e0b0f2a10180d2a20080d2c30180d2040180d2020000d4007008d500000013"}}, @mrs={0xbe, 0x18, {0x603000000013c02d}}, @uexit={0x0, 0x18, 0xe}, @smc={0x1e, 0x40, {0x4, [0x2, 0x9, 0x400, 0xc, 0x6]}}, @code={0xa, 0x84, {"007008d50000004bc0918ed200e0b0f2e10180d2a20180d2030180d2040080d2020000d4000028d5007008d5000028d5e09e8fd200e0b0f2210180d2c20180d2e30080d2640180d2020000d4000008d5000028d560628ed20060b0f2610080d2e20080d2030180d2c40080d2020000d4"}}, @code={0xa, 0x6c, {"c0289bd20040b0f2810180d2e20180d2030080d2a40080d2020000d4205088d200e0b0f2e10080d2420080d2430080d2840080d2020000d4007008d5000028d5003c200e00008072007008d5007008d500c8a12e007008d5"}}], 0x5b4}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x1}], 0x1) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0xf}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x4, 0x0}) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)

13m42.983606607s ago: executing program 1 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f00000000c0)=@attr_pmu_init)
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) (async)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x101, 0x5, 0x1, 0x0, @msi={0x3, 0xfffffeff, 0x28a, 0x3}}]})

13m27.394789441s ago: executing program 0 (id=243):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x60c801, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, 0xfffffffffffffffe)

13m25.799756741s ago: executing program 1 (id=244):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, 0x0)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x0, 0x29}}, @hvc={0x32, 0x40, {0x0, [0x1, 0x3b, 0x2, 0x8, 0x3]}}, @svc={0x122, 0x40, {0x8, [0x9ad9, 0x6e1, 0x2, 0x7, 0x3]}}, @mrs={0xbe, 0x18, {0x6030000000138027}}, @svc={0x122, 0x40, {0x84000007, [0x6, 0x9, 0x5f0, 0xa3, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013805d}}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013c642}}, @mrs={0xbe, 0x18, {0x603000000013807e}}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013e6cb}}, @code={0xa, 0x84, {"00a0800c00d8a00e000028d50080bf0dc05f8cd200a0b8f2610080d2420080d2430080d2a40180d2020000d4007008d5007008d50080a09be0928fd20040b0f2010080d2420080d2a30180d2a40180d2020000d4e07486d20080b0f2810080d2620080d2a30080d2840080d2020000d4"}}, @svc={0x122, 0x40, {0x86000000, [0x1ff, 0x7, 0x9, 0xfc2c, 0x24000000000000]}}, @mrs={0xbe, 0x18, {0x855431f4aa6f3123}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x4, 0x1, 0x7ff, 0x4}}, @hvc={0x32, 0x40, {0x8400000c, [0x4, 0x4, 0x3, 0x3, 0x1ff]}}], 0x2c4}, &(0x7f0000000340)=[@featur2], 0x1)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000e0f000/0x2000)=nil, r3, 0x3000002, 0x12, r2, 0x0)

13m14.389876463s ago: executing program 0 (id=245):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x6, &(0x7f0000000000)=0xb2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000100)="ca5c6c2b6169781c5e1c8b80f0eb16e50781270612112b91ba8461dbd4fa33c41a44f057ad1d7930cea02f6a9e759210d33cac603c4dbd49ac58fc06797cbcf3654e84b6320f555b", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x853, 0x0})

13m10.098953746s ago: executing program 1 (id=246):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="7cfaa2bfd6dd76375aa1bde04fceeb33743b07d73b3e9aac", 0x0, 0xffffffffffffff94)
r2 = eventfd2(0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x4020940d, 0x20000000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x22, 0xf000, 0x2, r2, 0xa})
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x287, 0x0})

12m26.345634335s ago: executing program 42 (id=245):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x6, &(0x7f0000000000)=0xb2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000100)="ca5c6c2b6169781c5e1c8b80f0eb16e50781270612112b91ba8461dbd4fa33c41a44f057ad1d7930cea02f6a9e759210d33cac603c4dbd49ac58fc06797cbcf3654e84b6320f555b", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x853, 0x0})

12m19.954053812s ago: executing program 43 (id=246):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="7cfaa2bfd6dd76375aa1bde04fceeb33743b07d73b3e9aac", 0x0, 0xffffffffffffff94)
r2 = eventfd2(0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x4020940d, 0x20000000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x22, 0xf000, 0x2, r2, 0xa})
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x287, 0x0})

2m29.501509653s ago: executing program 3 (id=254):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a82616})
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x5, 0x2, 0x4}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (rerun: 64)
ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async, rerun: 32)
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (rerun: 32)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x83, 0x8000, 0x0, 0x0, 0xffffffff, 0x4}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

2m26.090100108s ago: executing program 2 (id=255):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r1, &(0x7f0000000200)=0x8, 0x8)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff)
r3 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x8000000000000000, 0x80a0000, 0x0, r3, 0xc})
ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000100))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x100000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000480)={0x2, 0x12000, 0x1})
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x6, 0x2000, 0x0, r3})

2m16.262840149s ago: executing program 2 (id=256):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7e)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x20000000)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, r5, 0x1, 0x2012, r4, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, r5, 0x1000002, 0x2010, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x59)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0xa4a605311ad0de6b, 0x0, &(0x7f0000c67000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f000073e000/0x400000)=nil)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

2m15.363531488s ago: executing program 3 (id=257):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x40040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x8003}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1001, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7f)

1m57.079927219s ago: executing program 3 (id=258):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur1={0x1, 0x86}], 0x1) (async)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x18d242, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(r10, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRES64=0x0], 0x60}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000380)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000340)=0x10001}) (rerun: 64)
r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x52, 0x7}, @mrs={0xbe, 0x0, {0x603000000013df4f}}], 0x40}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
r13 = eventfd2(0x4, 0x800)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x1, r13}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) (async, rerun: 64)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa2) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f00000000c0)=0xb})
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 64)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1a) (async, rerun: 64)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34)
syz_kvm_setup_cpu$arm64(r7, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur1={0x1, 0x44}], 0x1)

1m53.801481859s ago: executing program 2 (id=259):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x400454ca, 0xd8ffffffffff0f00)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x3)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x10)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})

1m39.87233603s ago: executing program 3 (id=260):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
write$eventfd(r1, &(0x7f0000000000), 0xfffffdef)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0x84000007, [0x60e, 0xfffffffffffffffb, 0x4, 0x8, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x3}}], 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0x80111500, 0x20000000)
write$eventfd(r6, &(0x7f0000000040), 0x8)

1m36.164430038s ago: executing program 2 (id=261):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x285}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000002, [0x99b, 0x100000001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f00000000c0)=@attr_pmu_init)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x200000000000001}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r13, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000180)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r15, 0xae80, 0x0)

1m22.22459825s ago: executing program 3 (id=262):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_sys={0x603000000013c024, &(0x7f0000000100)=0xbec})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x310}}, @irq_setup={0x46, 0x18, {0x0, 0x3a2}}], 0x58}, &(0x7f00000000c0)=[@featur2={0x1, 0x10}], 0x1)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0)

1m10.263225684s ago: executing program 2 (id=263):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x2000, &(0x7f0000ecf000/0x2000)=nil})
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0x4020940d, 0x20)
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x3000000, 0x20010, r4, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffffffb, 0x95, &(0x7f0000000000)=0x3})

57.438051213s ago: executing program 3 (id=264):
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@arm64={0x30, 0x3, 0xd9, '\x00', 0x7})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000580)=[{0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x3f000000, [0x3ff, 0x9, 0x5, 0x5, 0x7fffffffffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xd00, 0x7, 0x9}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x65}, @svc={0x122, 0x40, {0x0, [0x35f, 0x8, 0x4, 0x7, 0xfffffffffffffffd]}}, @code={0xa, 0xcc, {"007008d5a00191d20040b8f2410080d2820080d2830080d2a40080d2020000d4c0779bd200c0b8f2810180d2020180d2030080d2040180d2020000d400c99cd20060b8f2e10180d2220180d2030180d2c40080d2020000d4c01290d20080b0f2810080d2620080d2030080d2240080d2020000d40000c0da007008d500dd8cd20000b8f2e10180d2620080d2030080d2040080d2020000d4000028d540ed9ed20060b8f2c10080d2420080d2430180d2040080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x3, 0xe9}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x9, 0xfffffff9, 0x7, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x61}}, @irq_setup={0x46, 0x18, {0x0, 0x30f}}, @hvc={0x32, 0x40, {0x40, [0xfffffffffffffffe, 0x4, 0x40, 0xd19, 0xc7e]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x4}}, @eret={0xe6, 0x18, 0x6}, @eret={0xe6, 0x18, 0x2}, @code={0xa, 0x54, {"007008d500e486d20060b0f2c10180d2020180d2630080d2240180d2020000d40088212e000040b3003c000e007008d5007008d5000028d5007008d500d4a07e"}}, @mrs={0xbe, 0x18, {0x603000000013c031}}, @msr={0x14, 0x20, {0x25bbcb7aa7f5996d, 0x5e}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x1, 0x2, 0x10000, 0x3}}, @code={0xa, 0x84, {"0014c05a000028d540359bd20000b0f2c10080d2a20180d2e30080d2840080d2020000d4202783d20060b0f2810080d2020180d2030180d2c40080d2020000d4008008d5a08c9ad20080b0f2410180d2a20080d2430180d2c40180d2020000d4007008d5007008d5007008d5007008d5"}}, @msr={0x14, 0x20, {0xc0600000002799ef, 0xffffffffffff8001}}, @msr={0x14, 0x20, {0x603000000013defa, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013df6a}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x3e9}}, @mrs={0xbe, 0x18, {0x603000000013dee4}}, @svc={0x122, 0x40, {0x10, [0x9, 0x7f, 0x8, 0x3, 0x7fffffffffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013d920}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x0, [0x6, 0x2, 0x2b, 0x5, 0x8]}}], 0x53c}], 0x1, 0x0, &(0x7f00000005c0)=[@featur1={0x1, 0x38}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000600)={0x10001, 0x5, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x7})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000006c0)={0x3})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f76000/0x4000)=nil, r2, 0x0, 0x810, r0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x6})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x6, 0x1, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
close(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b40)={0x0, &(0x7f00000007c0)=[@mrs={0xbe, 0x18, {0x603000000013df48}}, @mrs={0xbe, 0x18, {0x603000000013df18}}, @msr={0x14, 0x20, {0x603000000013f300, 0x3}}, @smc={0x1e, 0x40, {0x8600ff01, [0x0, 0x9, 0x7, 0xb, 0xb8]}}, @msr={0x14, 0x20, {0x603000000013e600, 0x5}}, @code={0xa, 0x84, {"e0048ed20080b0f2e10180d2420080d2a30080d2e40080d2020000d4007008d50020004f20b68cd200a0b8f2010080d2220080d2e30080d2040080d2020000d4007008d5a0478ed200e0b8f2e10180d2420180d2430180d2c40080d2020000d4007008d50000221e0080000d0000271e"}}, @eret={0xe6, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013df4c}}, @msr={0x14, 0x20, {0x603000000013c684, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c2b0}}, @eret={0xe6, 0x18, 0x1}, @smc={0x1e, 0x40, {0xc5000020, [0xf, 0x3, 0x9, 0xc25, 0x900000000000000]}}, @hvc={0x32, 0x40, {0x4400800d, [0x10a, 0x100000001, 0x9, 0x8, 0x401]}}, @mrs={0xbe, 0x18, {0x603000000013c800}}, @hvc={0x32, 0x40, {0x1, [0x7d, 0x7ff, 0x7, 0xb84, 0x6]}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x86000001, [0x4, 0x2, 0x9, 0xfffffffffffffe8e, 0xffffffffffffffff]}}, @hvc={0x32, 0x40, {0xc4004042, [0x200, 0x8cb, 0x7, 0xf118, 0xffffffff]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x169}}, @uexit={0x0, 0x18, 0x80000001}], 0x364}, &(0x7f0000000b80)=[@featur2={0x1, 0x80}], 0x1)
mmap$KVM_VCPU(&(0x7f0000e88000/0x1000)=nil, r2, 0xb8a613316838e004, 0x40010, r4, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000bc0)={0xffffff53, 0x9})
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bff000/0x400000)=nil)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x501202, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x100)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f0000000c40)={0x10001, 0x0, {[0x8, 0xb, 0x6, 0x81, 0x4c, 0x0, 0x3, 0x7, 0x9a3, 0x1, 0x5, 0x8, 0x5, 0x3d0, 0x401, 0x5], [0xdd, 0x5, 0x8, 0x1, 0x9, 0x3, 0x9, 0x8, 0x7, 0x3, 0x1, 0x4, 0x100000000, 0x81, 0x9, 0x1f7], [0x6, 0x6, 0x9, 0x2, 0xffffffffffffff01, 0x7, 0x400, 0x4, 0x8, 0x7, 0x9, 0x9, 0x0, 0x3ff, 0x2, 0x7f], [0x3, 0xfffffffffffff2d1, 0x4, 0x5, 0x5, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x8, 0x4, 0x8000, 0xa, 0x1]}})
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37)
ioctl$KVM_CAP_ARM_MTE(r8, 0x4068aea3, &(0x7f0000000e80))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x4000, 0x0)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xf)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

50.446453501s ago: executing program 2 (id=265):
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r4, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r9, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r11, 0x2000009, 0x213011, r9, 0x0) (async)
mmap$KVM_VCPU(&(0x7f000063a000/0x4000)=nil, r11, 0xb, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) (async)
mmap$KVM_VCPU(&(0x7f0000aab000/0x4000)=nil, 0x930, 0x4, 0x4010, 0xffffffffffffffff, 0x1000000)

9.892804354s ago: executing program 44 (id=264):
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@arm64={0x30, 0x3, 0xd9, '\x00', 0x7})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
syz_kvm_setup_cpu$arm64(r1, r0, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000580)=[{0x0, &(0x7f0000000040)=[@svc={0x122, 0x40, {0x3f000000, [0x3ff, 0x9, 0x5, 0x5, 0x7fffffffffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xd00, 0x7, 0x9}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x65}, @svc={0x122, 0x40, {0x0, [0x35f, 0x8, 0x4, 0x7, 0xfffffffffffffffd]}}, @code={0xa, 0xcc, {"007008d5a00191d20040b8f2410080d2820080d2830080d2a40080d2020000d4c0779bd200c0b8f2810180d2020180d2030080d2040180d2020000d400c99cd20060b8f2e10180d2220180d2030180d2c40080d2020000d4c01290d20080b0f2810080d2620080d2030080d2240080d2020000d40000c0da007008d500dd8cd20000b8f2e10180d2620080d2030080d2040080d2020000d4000028d540ed9ed20060b8f2c10080d2420080d2430180d2040080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x3, 0xe9}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x9, 0xfffffff9, 0x7, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0x61}}, @irq_setup={0x46, 0x18, {0x0, 0x30f}}, @hvc={0x32, 0x40, {0x40, [0xfffffffffffffffe, 0x4, 0x40, 0xd19, 0xc7e]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x4}}, @eret={0xe6, 0x18, 0x6}, @eret={0xe6, 0x18, 0x2}, @code={0xa, 0x54, {"007008d500e486d20060b0f2c10180d2020180d2630080d2240180d2020000d40088212e000040b3003c000e007008d5007008d5000028d5007008d500d4a07e"}}, @mrs={0xbe, 0x18, {0x603000000013c031}}, @msr={0x14, 0x20, {0x25bbcb7aa7f5996d, 0x5e}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x0, 0x1, 0x2, 0x10000, 0x3}}, @code={0xa, 0x84, {"0014c05a000028d540359bd20000b0f2c10080d2a20180d2e30080d2840080d2020000d4202783d20060b0f2810080d2020180d2030180d2c40080d2020000d4008008d5a08c9ad20080b0f2410180d2a20080d2430180d2c40180d2020000d4007008d5007008d5007008d5007008d5"}}, @msr={0x14, 0x20, {0xc0600000002799ef, 0xffffffffffff8001}}, @msr={0x14, 0x20, {0x603000000013defa, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013df6a}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x3e9}}, @mrs={0xbe, 0x18, {0x603000000013dee4}}, @svc={0x122, 0x40, {0x10, [0x9, 0x7f, 0x8, 0x3, 0x7fffffffffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013d920}}, @eret={0xe6, 0x18, 0x5}, @smc={0x1e, 0x40, {0x0, [0x6, 0x2, 0x2b, 0x5, 0x8]}}], 0x53c}], 0x1, 0x0, &(0x7f00000005c0)=[@featur1={0x1, 0x38}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000600)={0x10001, 0x5, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x7})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000006c0)={0x3})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000f76000/0x4000)=nil, r2, 0x0, 0x810, r0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x6})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x6, 0x1, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
close(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000b40)={0x0, &(0x7f00000007c0)=[@mrs={0xbe, 0x18, {0x603000000013df48}}, @mrs={0xbe, 0x18, {0x603000000013df18}}, @msr={0x14, 0x20, {0x603000000013f300, 0x3}}, @smc={0x1e, 0x40, {0x8600ff01, [0x0, 0x9, 0x7, 0xb, 0xb8]}}, @msr={0x14, 0x20, {0x603000000013e600, 0x5}}, @code={0xa, 0x84, {"e0048ed20080b0f2e10180d2420080d2a30080d2e40080d2020000d4007008d50020004f20b68cd200a0b8f2010080d2220080d2e30080d2040080d2020000d4007008d5a0478ed200e0b8f2e10180d2420180d2430180d2c40080d2020000d4007008d50000221e0080000d0000271e"}}, @eret={0xe6, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013df4c}}, @msr={0x14, 0x20, {0x603000000013c684, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c2b0}}, @eret={0xe6, 0x18, 0x1}, @smc={0x1e, 0x40, {0xc5000020, [0xf, 0x3, 0x9, 0xc25, 0x900000000000000]}}, @hvc={0x32, 0x40, {0x4400800d, [0x10a, 0x100000001, 0x9, 0x8, 0x401]}}, @mrs={0xbe, 0x18, {0x603000000013c800}}, @hvc={0x32, 0x40, {0x1, [0x7d, 0x7ff, 0x7, 0xb84, 0x6]}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x86000001, [0x4, 0x2, 0x9, 0xfffffffffffffe8e, 0xffffffffffffffff]}}, @hvc={0x32, 0x40, {0xc4004042, [0x200, 0x8cb, 0x7, 0xf118, 0xffffffff]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x169}}, @uexit={0x0, 0x18, 0x80000001}], 0x364}, &(0x7f0000000b80)=[@featur2={0x1, 0x80}], 0x1)
mmap$KVM_VCPU(&(0x7f0000e88000/0x1000)=nil, r2, 0xb8a613316838e004, 0x40010, r4, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000bc0)={0xffffff53, 0x9})
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bff000/0x400000)=nil)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x501202, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x100)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r0, 0x4208ae9b, &(0x7f0000000c40)={0x10001, 0x0, {[0x8, 0xb, 0x6, 0x81, 0x4c, 0x0, 0x3, 0x7, 0x9a3, 0x1, 0x5, 0x8, 0x5, 0x3d0, 0x401, 0x5], [0xdd, 0x5, 0x8, 0x1, 0x9, 0x3, 0x9, 0x8, 0x7, 0x3, 0x1, 0x4, 0x100000000, 0x81, 0x9, 0x1f7], [0x6, 0x6, 0x9, 0x2, 0xffffffffffffff01, 0x7, 0x400, 0x4, 0x8, 0x7, 0x9, 0x9, 0x0, 0x3ff, 0x2, 0x7f], [0x3, 0xfffffffffffff2d1, 0x4, 0x5, 0x5, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x8, 0x4, 0x8000, 0xa, 0x1]}})
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37)
ioctl$KVM_CAP_ARM_MTE(r8, 0x4068aea3, &(0x7f0000000e80))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x4000, 0x0)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xf)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

0s ago: executing program 45 (id=265):
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r4, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r9, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r11, 0x2000009, 0x213011, r9, 0x0) (async)
mmap$KVM_VCPU(&(0x7f000063a000/0x4000)=nil, r11, 0xb, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (rerun: 64)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r12, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) (async)
mmap$KVM_VCPU(&(0x7f0000aab000/0x4000)=nil, 0x930, 0x4, 0x4010, 0xffffffffffffffff, 0x1000000)

kernel console output (not intermixed with test programs):

[  382.376374][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.750214][ T3151] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:38513' (ED25519) to the list of known hosts.
[  601.552078][   T25] audit: type=1400 audit(600.760:60): avc:  denied  { name_bind } for  pid=3310 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  603.273785][   T25] audit: type=1400 audit(602.470:61): avc:  denied  { execute } for  pid=3311 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  603.290437][   T25] audit: type=1400 audit(602.490:62): avc:  denied  { execute_no_trans } for  pid=3311 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  622.549257][   T25] audit: type=1400 audit(621.760:63): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  622.584706][   T25] audit: type=1400 audit(621.790:64): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  622.668133][ T3311] cgroup: Unknown subsys name 'net'
[  622.720613][   T25] audit: type=1400 audit(621.930:65): avc:  denied  { unmount } for  pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  623.127036][ T3311] cgroup: Unknown subsys name 'cpuset'
[  623.227106][ T3311] cgroup: Unknown subsys name 'rlimit'
[  624.147299][   T25] audit: type=1400 audit(623.360:66): avc:  denied  { setattr } for  pid=3311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  624.166785][   T25] audit: type=1400 audit(623.370:67): avc:  denied  { mounton } for  pid=3311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  624.195075][   T25] audit: type=1400 audit(623.400:68): avc:  denied  { mount } for  pid=3311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  625.381979][ T3314] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  625.404912][   T25] audit: type=1400 audit(624.610:69): avc:  denied  { relabelto } for  pid=3314 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  625.429705][   T25] audit: type=1400 audit(624.630:70): avc:  denied  { write } for  pid=3314 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  625.611321][   T25] audit: type=1400 audit(624.820:71): avc:  denied  { read } for  pid=3311 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  625.629015][   T25] audit: type=1400 audit(624.840:72): avc:  denied  { open } for  pid=3311 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  625.676814][ T3311] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  680.049880][   T25] audit: type=1400 audit(679.260:73): avc:  denied  { execmem } for  pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  684.669262][   T25] audit: type=1400 audit(683.880:74): avc:  denied  { read } for  pid=3322 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  684.721306][   T25] audit: type=1400 audit(683.930:75): avc:  denied  { open } for  pid=3322 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  684.796910][   T25] audit: type=1400 audit(684.010:76): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  685.056449][   T25] audit: type=1400 audit(684.260:77): avc:  denied  { module_request } for  pid=3322 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  685.079090][   T25] audit: type=1400 audit(684.290:78): avc:  denied  { module_request } for  pid=3323 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  686.190694][   T25] audit: type=1400 audit(685.400:79): avc:  denied  { sys_module } for  pid=3323 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  715.235587][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.469704][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.690960][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.951452][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.873426][ T3322] hsr_slave_0: entered promiscuous mode
[  727.901683][ T3322] hsr_slave_1: entered promiscuous mode
[  728.778575][ T3323] hsr_slave_0: entered promiscuous mode
[  728.818240][ T3323] hsr_slave_1: entered promiscuous mode
[  728.849128][ T3323] debugfs: 'hsr0' already exists in 'hsr'
[  728.875581][ T3323] Cannot create hsr debugfs directory
[  734.340627][   T25] audit: type=1400 audit(733.550:80): avc:  denied  { create } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  734.386298][   T25] audit: type=1400 audit(733.570:81): avc:  denied  { write } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  734.423822][   T25] audit: type=1400 audit(733.630:82): avc:  denied  { read } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  734.583833][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  734.907956][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  735.121092][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  735.641294][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  737.176387][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  737.339005][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  737.490148][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  737.637737][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  750.418750][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.567132][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[  808.555915][ T3322] veth0_vlan: entered promiscuous mode
[  808.970962][ T3322] veth1_vlan: entered promiscuous mode
[  810.781394][ T3323] veth0_vlan: entered promiscuous mode
[  811.177499][ T3322] veth0_macvtap: entered promiscuous mode
[  811.686380][ T3322] veth1_macvtap: entered promiscuous mode
[  811.779290][ T3323] veth1_vlan: entered promiscuous mode
[  814.007465][ T3368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.086043][ T3368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.090039][ T3368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.160974][ T3323] veth0_macvtap: entered promiscuous mode
[  814.212069][ T3368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  814.716017][ T3323] veth1_macvtap: entered promiscuous mode
[  816.838122][   T25] audit: type=1400 audit(815.830:83): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  817.059880][   T25] audit: type=1400 audit(816.270:84): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/syzkaller.YtDZPz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  817.445449][   T25] audit: type=1400 audit(816.600:85): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  817.781229][ T3367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.795498][ T3367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  817.820709][ T3367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  817.858982][ T3367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.024045][   T25] audit: type=1400 audit(817.220:86): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/syzkaller.YtDZPz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  818.314173][   T25] audit: type=1400 audit(817.420:87): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/syzkaller.YtDZPz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  819.256941][   T25] audit: type=1400 audit(818.460:88): avc:  denied  { unmount } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  819.787309][   T25] audit: type=1400 audit(819.000:89): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  819.974077][   T25] audit: type=1400 audit(819.160:90): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=3800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  820.630954][   T25] audit: type=1400 audit(819.840:91): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  820.704508][   T25] audit: type=1400 audit(819.910:92): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  822.137578][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  822.865544][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  822.866326][   T25] audit: type=1400 audit(822.040:94): avc:  denied  { read write } for  pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  822.867198][   T25] audit: type=1400 audit(822.070:95): avc:  denied  { open } for  pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  822.954761][   T25] audit: type=1400 audit(822.070:96): avc:  denied  { ioctl } for  pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  834.004875][   T25] audit: type=1400 audit(833.150:97): avc:  denied  { read } for  pid=3475 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  834.011325][   T25] audit: type=1400 audit(833.210:98): avc:  denied  { open } for  pid=3475 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  834.583662][   T25] audit: type=1400 audit(833.780:99): avc:  denied  { ioctl } for  pid=3475 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  835.216279][   T25] audit: type=1400 audit(834.400:100): avc:  denied  { write } for  pid=3475 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  871.475964][   T25] audit: type=1400 audit(870.660:101): avc:  denied  { append } for  pid=3495 comm="syz.1.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  877.779672][   T25] audit: type=1400 audit(876.970:102): avc:  denied  { execute } for  pid=3501 comm="syz.0.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1005.789124][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.050953][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.129361][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.477971][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.398429][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1023.566410][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1023.646200][   T51] bond0 (unregistering): Released all slaves
[ 1025.189864][   T51] hsr_slave_0: left promiscuous mode
[ 1025.387332][   T51] hsr_slave_1: left promiscuous mode
[ 1025.905890][   T51] veth1_macvtap: left promiscuous mode
[ 1025.915602][   T51] veth0_macvtap: left promiscuous mode
[ 1025.925127][   T51] veth1_vlan: left promiscuous mode
[ 1025.955581][   T51] veth0_vlan: left promiscuous mode
[ 1042.977008][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.027228][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.089658][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.845482][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.643792][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1062.005442][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1062.250356][   T51] bond0 (unregistering): Released all slaves
[ 1064.029293][   T51] hsr_slave_0: left promiscuous mode
[ 1064.073424][   T51] hsr_slave_1: left promiscuous mode
[ 1064.414695][   T51] veth1_macvtap: left promiscuous mode
[ 1064.416050][   T51] veth0_macvtap: left promiscuous mode
[ 1064.427911][   T51] veth1_vlan: left promiscuous mode
[ 1064.436442][   T51] veth0_vlan: left promiscuous mode
[ 1089.821339][ T3546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1090.010879][ T3546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.599985][ T3554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1097.866905][ T3554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1110.610780][ T3546] hsr_slave_0: entered promiscuous mode
[ 1110.679146][ T3546] hsr_slave_1: entered promiscuous mode
[ 1119.201495][ T3554] hsr_slave_0: entered promiscuous mode
[ 1119.297133][ T3554] hsr_slave_1: entered promiscuous mode
[ 1119.456003][ T3554] debugfs: 'hsr0' already exists in 'hsr'
[ 1119.474450][ T3554] Cannot create hsr debugfs directory
[ 1125.234517][ T3546] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1126.108048][ T3546] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1126.534684][ T3546] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1126.954347][ T3546] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1136.195948][ T3554] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1136.568200][ T3554] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1136.909634][ T3554] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1137.307374][ T3554] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1154.298406][ T3546] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1160.377942][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1245.875761][ T3546] veth0_vlan: entered promiscuous mode
[ 1246.726448][ T3546] veth1_vlan: entered promiscuous mode
[ 1249.875552][ T3546] veth0_macvtap: entered promiscuous mode
[ 1250.387876][ T3546] veth1_macvtap: entered promiscuous mode
[ 1254.677928][ T3700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1254.690380][ T3700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1254.975308][ T3700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1254.976818][ T3700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1255.246595][ T3554] veth0_vlan: entered promiscuous mode
[ 1257.527300][ T3554] veth1_vlan: entered promiscuous mode
[ 1262.396435][ T3554] veth0_macvtap: entered promiscuous mode
[ 1263.056416][ T3554] veth1_macvtap: entered promiscuous mode
[ 1266.427238][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.536458][ T3430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.550211][ T3430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.551268][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1383.327290][ T3416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1385.459179][ T3416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.236139][ T3416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.460674][ T3416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.324181][ T3416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1416.644785][ T3416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1416.860267][ T3416] bond0 (unregistering): Released all slaves
[ 1419.335255][ T3416] hsr_slave_0: left promiscuous mode
[ 1419.505996][ T3416] hsr_slave_1: left promiscuous mode
[ 1420.281485][ T3416] veth1_macvtap: left promiscuous mode
[ 1420.288700][ T3416] veth0_macvtap: left promiscuous mode
[ 1420.315670][ T3416] veth1_vlan: left promiscuous mode
[ 1420.330056][ T3416] veth0_vlan: left promiscuous mode
[ 1511.116309][ T3846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1511.645851][ T3846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1516.840167][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1518.298837][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1519.561845][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.905321][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.129304][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1534.230126][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1534.320073][   T51] bond0 (unregistering): Released all slaves
[ 1536.208872][   T51] hsr_slave_0: left promiscuous mode
[ 1536.529040][   T51] hsr_slave_1: left promiscuous mode
[ 1537.286219][   T51] veth1_macvtap: left promiscuous mode
[ 1537.305803][   T51] veth0_macvtap: left promiscuous mode
[ 1537.307809][   T51] veth1_vlan: left promiscuous mode
[ 1537.309278][   T51] veth0_vlan: left promiscuous mode
[ 1573.601393][ T3846] hsr_slave_0: entered promiscuous mode
[ 1573.680326][ T3846] hsr_slave_1: entered promiscuous mode
[ 1587.118871][ T3846] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1587.429008][ T3846] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1588.110423][ T3846] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1589.100909][ T3846] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1604.640932][ T3928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1605.048532][ T3928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1616.060499][ T3846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1638.709707][ T3928] hsr_slave_0: entered promiscuous mode
[ 1638.749488][ T3928] hsr_slave_1: entered promiscuous mode
[ 1638.815081][ T3928] debugfs: 'hsr0' already exists in 'hsr'
[ 1638.819079][ T3928] Cannot create hsr debugfs directory
[ 1655.090810][ T3928] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1655.691008][ T3928] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1656.166814][ T3928] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1656.498156][ T3928] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1686.307655][ T3928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1747.809730][ T3846] veth0_vlan: entered promiscuous mode
[ 1748.796453][ T3846] veth1_vlan: entered promiscuous mode
[ 1752.338779][ T3846] veth0_macvtap: entered promiscuous mode
[ 1752.918947][ T3846] veth1_macvtap: entered promiscuous mode
[ 1756.798419][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.896135][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1756.905519][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1757.124749][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1835.929325][ T3928] veth0_vlan: entered promiscuous mode
[ 1837.126547][ T3928] veth1_vlan: entered promiscuous mode
[ 1840.578135][ T3928] veth0_macvtap: entered promiscuous mode
[ 1841.294496][ T3928] veth1_macvtap: entered promiscuous mode
[ 1845.665591][ T3342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1845.688045][ T3342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1845.760957][   T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1845.815341][   T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1852.258537][   T25] audit: type=1400 audit(1851.470:103): avc:  denied  { setattr } for  pid=4168 comm="syz.4.47" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2126.120638][ T3342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2129.028717][ T3342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2130.589810][ T3342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2131.870845][ T3342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2153.819702][ T3342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2154.297968][ T3342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2154.805619][ T3342] bond0 (unregistering): Released all slaves
[ 2157.635187][ T3342] hsr_slave_0: left promiscuous mode
[ 2157.783477][ T3342] hsr_slave_1: left promiscuous mode
[ 2158.726908][ T3342] veth1_macvtap: left promiscuous mode
[ 2158.776380][ T3342] veth0_macvtap: left promiscuous mode
[ 2158.795327][ T3342] veth1_vlan: left promiscuous mode
[ 2158.799966][ T3342] veth0_vlan: left promiscuous mode
[ 2185.385443][ T3882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2186.751689][ T3882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2188.291194][ T3882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2189.707878][ T3882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2210.304248][ T3882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2210.614878][ T3882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2210.765150][ T3882] bond0 (unregistering): Released all slaves
[ 2214.386136][ T3882] hsr_slave_0: left promiscuous mode
[ 2214.505712][ T3882] hsr_slave_1: left promiscuous mode
[ 2215.178487][ T3882] veth1_macvtap: left promiscuous mode
[ 2215.206950][ T3882] veth0_macvtap: left promiscuous mode
[ 2215.211616][ T3882] veth1_vlan: left promiscuous mode
[ 2215.254835][ T3882] veth0_vlan: left promiscuous mode
[ 2277.001396][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2277.393464][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2281.571227][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2281.955764][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2309.148337][ T4328] hsr_slave_0: entered promiscuous mode
[ 2309.267969][ T4328] hsr_slave_1: entered promiscuous mode
[ 2313.141917][ T4322] hsr_slave_0: entered promiscuous mode
[ 2313.197717][ T4322] hsr_slave_1: entered promiscuous mode
[ 2313.244221][ T4322] debugfs: 'hsr0' already exists in 'hsr'
[ 2313.274983][ T4322] Cannot create hsr debugfs directory
[ 2330.435599][ T4328] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2331.266967][ T4328] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2331.951211][ T4328] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2332.599594][ T4328] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2339.729597][ T4322] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2340.259800][ T4322] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2340.834418][ T4322] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2341.300737][ T4322] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2370.388432][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2375.995938][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2523.908395][ T4328] veth0_vlan: entered promiscuous mode
[ 2525.026485][ T4328] veth1_vlan: entered promiscuous mode
[ 2529.327457][ T4328] veth0_macvtap: entered promiscuous mode
[ 2531.079695][ T4328] veth1_macvtap: entered promiscuous mode
[ 2532.129662][ T4322] veth0_vlan: entered promiscuous mode
[ 2534.629758][ T4322] veth1_vlan: entered promiscuous mode
[ 2537.676669][ T4339] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2537.689089][ T4339] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2537.714692][ T4339] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2537.780263][ T3700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2542.060844][ T4322] veth0_macvtap: entered promiscuous mode
[ 2543.826487][ T4322] veth1_macvtap: entered promiscuous mode
[ 2548.855078][ T3702] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.857052][ T3702] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.961984][ T3702] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2549.064299][ T3702] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3100.461791][   T25] audit: type=1400 audit(3099.550:104): avc:  denied  { map } for  pid=4843 comm="syz.7.126" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 3752.005708][ T4716] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3754.021528][ T4716] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3756.007316][ T4716] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3757.971806][ T4716] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3795.888939][ T4716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3796.340672][ T4716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3796.675108][ T4716] bond0 (unregistering): Released all slaves
[ 3800.227670][ T4716] hsr_slave_0: left promiscuous mode
[ 3800.393850][ T4716] hsr_slave_1: left promiscuous mode
[ 3801.401758][ T4716] veth1_macvtap: left promiscuous mode
[ 3801.464124][ T4716] veth0_macvtap: left promiscuous mode
[ 3801.470757][ T4716] veth1_vlan: left promiscuous mode
[ 3801.537369][ T4716] veth0_vlan: left promiscuous mode
[ 3919.022022][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3919.928227][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3936.187260][ T5153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3937.979265][ T5153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3939.369238][ T5153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3940.989897][ T5153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3970.274801][ T5153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3970.526053][ T5153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3970.757869][ T5153] bond0 (unregistering): Released all slaves
[ 3973.366955][ T5153] hsr_slave_0: left promiscuous mode
[ 3973.575482][ T5153] hsr_slave_1: left promiscuous mode
[ 3974.455515][ T5153] veth1_macvtap: left promiscuous mode
[ 3974.467694][ T5153] veth0_macvtap: left promiscuous mode
[ 3974.469729][ T5153] veth1_vlan: left promiscuous mode
[ 3974.528954][ T5153] veth0_vlan: left promiscuous mode
[ 4003.459928][ T5142] hsr_slave_0: entered promiscuous mode
[ 4003.537564][ T5142] hsr_slave_1: entered promiscuous mode
[ 4028.679175][ T5142] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 4029.276424][ T5142] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 4030.018813][ T5142] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 4030.569495][ T5142] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 4065.530062][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4065.770836][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4069.068774][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4113.907133][ T5222] hsr_slave_0: entered promiscuous mode
[ 4114.079560][ T5222] hsr_slave_1: entered promiscuous mode
[ 4114.228191][ T5222] debugfs: 'hsr0' already exists in 'hsr'
[ 4114.239312][ T5222] Cannot create hsr debugfs directory
[ 4137.458379][ T5222] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 4138.186856][ T5222] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 4138.760968][ T5222] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 4139.535077][ T5222] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 4181.767882][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4258.277063][ T5142] veth0_vlan: entered promiscuous mode
[ 4259.936194][ T5142] veth1_vlan: entered promiscuous mode
[ 4264.646418][ T5142] veth0_macvtap: entered promiscuous mode
[ 4265.555653][ T5142] veth1_macvtap: entered promiscuous mode
[ 4270.584161][ T5146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4270.600851][ T4333] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4270.659879][ T3702] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4270.929826][ T4088] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4399.776049][ T5222] veth0_vlan: entered promiscuous mode
[ 4401.367849][ T5222] veth1_vlan: entered promiscuous mode
[ 4406.579036][ T5222] veth0_macvtap: entered promiscuous mode
[ 4407.723267][ T5222] veth1_macvtap: entered promiscuous mode
[ 4413.583909][ T5456] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4413.586143][ T5456] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4413.693977][ T5456] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4413.764421][ T5456] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4633.504881][ T5335] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4635.960066][ T5335] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4638.450743][ T5335] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4640.875831][ T5335] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4676.950921][ T5335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4677.335118][ T5335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4677.628469][ T5335] bond0 (unregistering): Released all slaves
[ 4680.264175][ T5335] hsr_slave_0: left promiscuous mode
[ 4680.407011][ T5335] hsr_slave_1: left promiscuous mode
[ 4681.250319][ T5335] veth1_macvtap: left promiscuous mode
[ 4681.253016][ T5335] veth0_macvtap: left promiscuous mode
[ 4681.280346][ T5335] veth1_vlan: left promiscuous mode
[ 4681.304625][ T5335] veth0_vlan: left promiscuous mode
[ 4728.718113][ T5548] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4730.924308][ T5548] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4732.491745][ T5548] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4735.417137][ T5548] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4766.831883][ T5548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4767.085155][ T5548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4767.256093][ T5548] bond0 (unregistering): Released all slaves
[ 4770.371767][ T5548] hsr_slave_0: left promiscuous mode
[ 4770.514609][ T5548] hsr_slave_1: left promiscuous mode
[ 4771.536073][ T5548] veth1_macvtap: left promiscuous mode
[ 4771.546977][ T5548] veth0_macvtap: left promiscuous mode
[ 4771.549079][ T5548] veth1_vlan: left promiscuous mode
[ 4771.550548][ T5548] veth0_vlan: left promiscuous mode
[ 4832.386972][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4832.876637][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4840.877319][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4841.275409][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4873.786903][ T5530] hsr_slave_0: entered promiscuous mode
[ 4873.918603][ T5530] hsr_slave_1: entered promiscuous mode
[ 4883.309341][ T5537] hsr_slave_0: entered promiscuous mode
[ 4883.399028][ T5537] hsr_slave_1: entered promiscuous mode
[ 4883.471854][ T5537] debugfs: 'hsr0' already exists in 'hsr'
[ 4883.525436][ T5537] Cannot create hsr debugfs directory
[ 4923.007815][ T5530] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 4924.118279][ T5530] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 4925.010557][ T5530] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 4926.964000][ T5530] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 4933.624781][ T5537] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 4934.198893][ T5537] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 4934.621713][ T5537] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 4935.178203][ T5537] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 4971.467787][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4976.891224][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5122.500645][ T5530] veth0_vlan: entered promiscuous mode
[ 5123.916229][ T5530] veth1_vlan: entered promiscuous mode
[ 5129.126309][ T5537] veth0_vlan: entered promiscuous mode
[ 5130.931373][ T5530] veth0_macvtap: entered promiscuous mode
[ 5131.906769][ T5537] veth1_vlan: entered promiscuous mode
[ 5132.216191][ T5530] veth1_macvtap: entered promiscuous mode
[ 5139.051093][ T5548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5139.066196][ T3430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5139.118359][ T3367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5139.174984][ T3367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5139.410383][ T5537] veth0_macvtap: entered promiscuous mode
[ 5140.908887][ T5537] veth1_macvtap: entered promiscuous mode
[ 5148.769710][ T5153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5148.791626][ T5548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5148.903673][ T5548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5148.913999][ T5548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5450.831031][ T5146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5453.689727][ T5146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5456.309959][ T5146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5459.284744][ T5146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5489.789848][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5490.030543][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5490.255627][ T5146] bond0 (unregistering): Released all slaves
[ 5495.095371][ T5146] hsr_slave_0: left promiscuous mode
[ 5495.338058][ T5146] hsr_slave_1: left promiscuous mode
[ 5496.465156][ T5146] veth1_macvtap: left promiscuous mode
[ 5496.479919][ T5146] veth0_macvtap: left promiscuous mode
[ 5496.506495][ T5146] veth1_vlan: left promiscuous mode
[ 5496.554484][ T5146] veth0_vlan: left promiscuous mode
[ 5535.011464][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5536.940009][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5539.138167][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5541.966498][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5576.150588][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5576.551292][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5576.838170][   T12] bond0 (unregistering): Released all slaves
[ 5579.174892][   T12] hsr_slave_0: left promiscuous mode
[ 5579.245041][   T12] hsr_slave_1: left promiscuous mode
[ 5579.949086][   T12] veth1_macvtap: left promiscuous mode
[ 5579.991980][   T12] veth0_macvtap: left promiscuous mode
[ 5580.016220][   T12] veth1_vlan: left promiscuous mode
[ 5580.038916][   T12] veth0_vlan: left promiscuous mode
[ 5642.548530][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5642.868707][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5659.258439][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5659.790654][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5685.968403][ T5894] hsr_slave_0: entered promiscuous mode
[ 5686.137626][ T5894] hsr_slave_1: entered promiscuous mode
[ 5701.477323][ T5897] hsr_slave_0: entered promiscuous mode
[ 5701.559274][ T5897] hsr_slave_1: entered promiscuous mode
[ 5701.663775][ T5897] debugfs: 'hsr0' already exists in 'hsr'
[ 5701.674794][ T5897] Cannot create hsr debugfs directory
[ 5728.734290][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 5731.375526][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 5732.221521][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 5734.490793][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 5746.330590][ T5897] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 5746.721554][ T5897] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 5747.209955][ T5897] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 5747.808193][ T5897] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 5770.491671][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5781.956414][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5902.589369][ T5894] veth0_vlan: entered promiscuous mode
[ 5903.655246][ T5894] veth1_vlan: entered promiscuous mode
[ 5907.626326][ T5894] veth0_macvtap: entered promiscuous mode
[ 5908.329760][ T5894] veth1_macvtap: entered promiscuous mode
[ 5913.649690][ T5548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5913.655855][ T5548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5913.704904][ T5153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5913.884658][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5914.005962][ T5897] veth0_vlan: entered promiscuous mode
[ 5916.229869][ T5897] veth1_vlan: entered promiscuous mode
[ 5922.809115][ T5897] veth0_macvtap: entered promiscuous mode
[ 5923.631485][ T5897] veth1_macvtap: entered promiscuous mode
[ 5928.614489][ T5548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5928.616044][ T5548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5928.851050][ T4088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5929.113531][ T5335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6287.398753][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6287.900469][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6301.708403][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6302.305274][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6347.056919][ T6243] hsr_slave_0: entered promiscuous mode
[ 6347.210196][ T6243] hsr_slave_1: entered promiscuous mode
[ 6347.406632][ T6243] debugfs: 'hsr0' already exists in 'hsr'
[ 6347.433827][ T6243] Cannot create hsr debugfs directory
[ 6362.701463][ T6248] hsr_slave_0: entered promiscuous mode
[ 6362.837983][ T6248] hsr_slave_1: entered promiscuous mode
[ 6362.915457][ T6248] debugfs: 'hsr0' already exists in 'hsr'
[ 6362.927742][ T6248] Cannot create hsr debugfs directory
[ 6407.295966][ T6243] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 6410.847648][ T6243] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 6414.244938][ T6243] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 6415.435416][ T6243] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 6429.095717][ T6248] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 6429.726810][ T6248] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 6430.395648][ T6248] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 6431.475142][ T6248] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 6466.211449][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6480.987562][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6540.805419][   T27] INFO: task syz.2.265:6225 blocked for more than 430 seconds.
[ 6540.886293][   T27]       Not tainted syzkaller #0
[ 6540.905407][   T27]       Blocked by coredump.
[ 6540.905869][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6540.906356][   T27] task:syz.2.265       state:D stack:0     pid:6225  tgid:6224  ppid:5894   task_flags:0x40044c flags:0x00000018
[ 6540.907872][   T27] Call trace:
[ 6540.908366][   T27]  __switch_to+0x584/0xb20 (T)
[ 6540.910483][   T27]  __schedule+0x1eec/0x33a4
[ 6540.911089][   T27]  schedule+0xac/0x27c
[ 6540.911599][   T27]  schedule_timeout+0x5c/0x1e4
[ 6540.912042][   T27]  do_wait_for_common+0x28c/0x444
[ 6541.054205][   T27]  wait_for_completion+0x44/0x5c
[ 6541.054897][   T27]  __synchronize_srcu+0x2a4/0x320
[ 6541.055379][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 6541.055867][   T27]  __mmu_notifier_release+0x424/0x614
[ 6541.056356][   T27]  exit_mmap+0xb8/0xbb8
[ 6541.056775][   T27]  __mmput+0x10c/0x528
[ 6541.057266][   T27]  mmput+0x70/0xac
[ 6541.057756][   T27]  exit_mm+0x158/0x258
[ 6541.058211][   T27]  do_exit+0x788/0x2378
[ 6541.058651][   T27]  do_group_exit+0x1d4/0x2ac
[ 6541.059116][   T27]  get_signal+0x1440/0x1554
[ 6541.059596][   T27]  do_signal+0x23c/0x4dd0
[ 6541.060105][   T27]  do_notify_resume+0xb0/0x270
[ 6541.060535][   T27]  el0_svc+0xb8/0x164
[ 6541.060977][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 6541.061427][   T27]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6541.197040][   T27] 
[ 6541.197040][   T27] Showing all locks held in the system:
[ 6541.213984][   T27] 1 lock held by khungtaskd/27:
[ 6541.214519][   T27]  #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 6541.217091][   T27] 2 locks held by getty/3180:
[ 6541.217516][   T27]  #0: 27f000001210a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6541.219173][   T27]  #1: 62ff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 6541.220807][   T27] 1 lock held by sshd-session/3310:
[ 6541.221145][   T27] 2 locks held by syz-executor/3311:
[ 6541.221489][   T27] 2 locks held by kworker/u4:4/3367:
[ 6541.221820][   T27]  #0: d8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6541.385018][   T27]  #1: ffff80008fd97c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6541.386832][   T27] 3 locks held by kworker/u4:12/4088:
[ 6541.387214][   T27] 3 locks held by kworker/u4:2/4716:
[ 6541.387545][   T27] 2 locks held by kworker/u4:5/5008:
[ 6541.387865][   T27]  #0: d8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6541.389629][   T27]  #1: ffff8000a1057c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6541.391364][   T27] 3 locks held by kworker/u4:14/5335:
[ 6541.391719][   T27] 2 locks held by kworker/u4:16/5548:
[ 6541.392053][   T27] 2 locks held by kworker/u4:7/5900:
[ 6541.604515][   T27]  #0: d8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6541.606533][   T27]  #1: ffff80008e537c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6541.608344][   T27] 2 locks held by syz.3.264/6220:
[ 6541.608750][   T27] 3 locks held by kworker/u4:6/6372:
[ 6541.609076][   T27] 1 lock held by modprobe/6414:
[ 6541.609416][   T27] 2 locks held by modprobe/6415:
[ 6541.693341][   T27] 
[ 6541.694002][   T27] =============================================
[ 6541.694002][   T27] 
[ 6541.694852][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 6541.700035][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 6541.701561][   T27] Hardware name: linux,dummy-virt (DT)
[ 6541.702608][   T27] Call trace:
[ 6541.703502][   T27]  show_stack+0x2c/0x3c (C)
[ 6541.704654][   T27]  __dump_stack+0x30/0x40
[ 6541.705413][   T27]  dump_stack_lvl+0x30/0x12c
[ 6541.706371][   T27]  dump_stack+0x1c/0x28
[ 6541.707242][   T27]  vpanic+0x22c/0x59c
[ 6541.708078][   T27]  vpanic+0x0/0x59c
[ 6541.708902][   T27]  hung_task_panic+0x0/0x2c
[ 6541.709847][   T27]  kthread+0x794/0x9a0
[ 6541.710729][   T27]  ret_from_fork+0x10/0x20
[ 6541.712629][   T27] Kernel Offset: disabled
[ 6541.713485][   T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f
[ 6541.714743][   T27] Memory Limit: none
[ 6541.717102][   T27] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:30:24  Registers:
info registers vcpu 0

CPU#0
 PC=ffff80008656fbfc X00=ffff800087aa49e0 X01=0000000000000000
X02=0000000000000000 X03=ffff80008056ddc4 X04=0000000000000001
X05=0000000000000001 X06=0000000000000000 X07=ffff80008056ddb8
X08=ffff80008656fbf4 X09=0000000000000000 X10=0000000000ff0100
X11=ffff800087f69a20 X12=0000000000000003 X13=0000000000000003
X14=ffffffffffffffff X15=0000000000000614 X16=0000000000000003
X17=0fff00000268c062 X18=00000000000000ff X19=efff800000000000
X20=ffff80008c1e4f00 X21=ffff80008c1e4f38 X22=00000000000000f2
X23=0000000000000007 X24=0000000000000001 X25=ffff80008c1e4000
X26=ffff80008c1e4f50 X27=000000000013f358 X28=000005f2b6607800
X29=ffff800080007360 X30=ffff800084a9b6d4  SP=ffff800080007360
PSTATE=40402009 -Z-- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=0000306e6f6d6c6e:000030667663696e Z01=ffff000000000000:ffff000000000000
Z02=0000000000000000:ff000000ff000000 Z03=ffffffff00ff0000:0000000000000000
Z04=0000000000000000:ffff0f0000000000 Z05=bb448243222c92da:e3914ed4e87380b0
Z06=6edc4d3a2914b135:d8e9c869e2695c88 Z07=b20fae707afde253:388e9c6c4fa85ca0
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=43788d6f07084f17:4508b00c6052a10f Z17=6b69be1163cb6500:a4ac85c293540e63
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000