last executing test programs:

43m45.746423667s ago: executing program 0 (id=167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0)=0x8100000001, 0x51a8)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x4, 0x220)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x18b080, 0x0)
munmap(&(0x7f0000c76000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000240)=[@svc={0x122, 0x40, {0x4, [0x7fffffff, 0x1, 0xef6, 0x9, 0x7fffffff]}}, @irq_setup={0x46, 0x18, {0x1, 0x260}}, @irq_setup={0x46, 0x18, {0x3, 0x287}}, @svc={0x122, 0x40, {0x80000002, [0x3c5, 0x2, 0x2c00000000000, 0x6, 0x7]}}, @msr={0x14, 0x20, {0x603000000013e728, 0x9}}, @irq_setup={0x46, 0x18, {0x4, 0x26d}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x3a8}}, @smc={0x1e, 0x40, {0xffff, [0x1, 0x92, 0xa16, 0x0, 0x800]}}, @hvc={0x32, 0x40, {0x84000009, [0x1, 0x80000001, 0x8, 0x6, 0x80000000]}}, @svc={0x122, 0x40, {0x2000, [0x0, 0xfffffffffffffff8, 0xb, 0x6, 0x9]}}, @uexit={0x0, 0x18, 0x6}, @smc={0x1e, 0x40, {0x0, [0xd, 0x4f, 0x7, 0x8001, 0x8000]}}, @smc={0x1e, 0x40, {0x40, [0x40ef, 0x452, 0x8e, 0x3, 0x7]}}, @svc={0x122, 0x40, {0xc5000020, [0x4, 0x4, 0x4000000000000000, 0x9, 0x75b1]}}, @code={0xa, 0x54, {"e08f83d20040b8f2010180d2020180d2e30180d2640180d2020000d4007008d5000840bae0079f9a0000399e0000e00d007008d5003c004e0028c01a0060006f"}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x1b3}}, @eret={0xe6, 0x18, 0xb}, @code={0xa, 0x84, {"00279dd20080b0f2810080d2220180d2630080d2440180d2020000d4000008d540768dd200c0b8f2210080d2220180d2030180d2840080d2020000d4007008d5007008d500d4202e007008d50094005f007008d5e0a287d200a0b0f2010180d2420080d2a30080d2a40080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013f667, 0x6}}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x39d}}], 0x420}], 0x1, 0x0, &(0x7f0000000040)=[@featur2={0x1, 0xad}], 0x1)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r15, 0x4040aea0, &(0x7f0000000140)=@arm64={0x2, 0x3, 0x1, '\x00', 0x6})
ioctl$KVM_RUN(r15, 0xae80, 0x0)

43m43.680985832s ago: executing program 1 (id=168):
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@arm64_fw={0x6030000000140002, 0xfffffffffffffffe}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) (async)
write$eventfd(r6, &(0x7f00000001c0), 0xfdef) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r8 = eventfd2(0x4, 0x80000) (rerun: 64)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async, rerun: 32)
ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000000c0)={r8, 0x3}) (async, rerun: 32)
write$eventfd(r8, &(0x7f0000000140)=0x3, 0x8) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x3b)

43m36.820485511s ago: executing program 1 (id=169):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x7, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r5 = eventfd2(0x8801, 0x800)
r6 = eventfd2(0x3ff, 0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5, 0x5, 0x2, r6})
close(r5)
r7 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)=0x1b})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x28)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r17, 0x603000000013df02, 0x8000)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x284}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r13, 0x3, 0x100)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})

43m29.643496861s ago: executing program 0 (id=170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
syz_kvm_setup_cpu$arm64(r4, r2, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000240)=[@svc={0x122, 0x40, {0x2, [0x7, 0x9, 0x3, 0xcb5a, 0x4]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0xb2}}, @eret={0xe6, 0x18}, @mrs={0xbe, 0x18, {0x603000000013f288}}, @uexit={0x0, 0x18, 0xa}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x40, 0x10, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x3, 0xd, 0x1, 0x8}}], 0x108}], 0x1, 0x0, &(0x7f0000000180), 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x125b02, 0x0)

43m24.229032797s ago: executing program 0 (id=171):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013df48, &(0x7f0000000040)=0x2})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0xb, 0x11, r6, 0x0)
r9 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)

43m23.412200558s ago: executing program 1 (id=172):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
munmap(&(0x7f000049b000/0x400000)=nil, 0x400000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x5)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x664b7dee, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
write$eventfd(r10, 0x0, 0x300)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

43m16.816008612s ago: executing program 1 (id=173):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000000), 0x280, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@mrs={0xbe, 0x18, {0x3fe7}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

43m16.078668005s ago: executing program 0 (id=174):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, <r0=>0xffffffffffffffff, 0x1})
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x9, 0x8c9})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40402, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_CAP_ARM_USER_IRQ(r0, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0x0, 0xd000, 0x0, r1, 0x3})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f00008d2000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x1, 0xe5f5f6fcb7501112, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_CAP_ARM_USER_IRQ(r4, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000240)={0xffffffffffffffff, 0x3f77a22d})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r6, 0x4068aea3, &(0x7f00000002c0)={0xe4, 0x0, 0x40})
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000340)={0x10002, 0x0, &(0x7f0000976000/0x3000)=nil})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000380)={0x70})
r7 = syz_kvm_vgic_v3_setup(r6, 0x2, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000400)=@attr_other={0x0, 0x10001, 0x7790000000, &(0x7f00000003c0)=0x878a})
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000440)={0xc, 0x8})
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31)
ioctl$KVM_SET_SREGS(r6, 0x4000ae84, &(0x7f0000000480)={{0x80a0000, 0xa000, 0x0, 0x6, 0x2, 0xef, 0x16, 0x1, 0x6, 0x5, 0x4, 0x2c}, {0xdddd0000, 0x54000, 0xa, 0x6, 0x6, 0x1, 0x76, 0xc, 0x1, 0x6, 0xc, 0x5}, {0xe000, 0x2, 0x4, 0x3a, 0x2f, 0x1, 0x4, 0x1, 0xb, 0x3}, {0x100000, 0x50000, 0xa, 0x2, 0xff, 0x9, 0x6, 0xf7, 0xf7, 0x2, 0x5d, 0x1}, {0x60000, 0x70000, 0x9, 0xfc, 0x3, 0xb, 0x5, 0x3, 0x2, 0x24, 0x9, 0xe9}, {0x0, 0x8080000, 0x4, 0xf4, 0x6e, 0x0, 0x2d, 0x1, 0xfd, 0x8, 0x1, 0xa0}, {0xeeee8000, 0xeeef0000, 0xe, 0x2, 0x0, 0x7, 0x2, 0x3, 0xaa, 0x3, 0x2, 0x3}, {0xa000, 0xb000, 0xa, 0x9, 0x1, 0xab, 0x9, 0x4, 0x80, 0xf, 0x8, 0x10}, {0x2000}, {0x4, 0x6}, 0x0, 0x0, 0xdddd0000, 0x4020, 0x9, 0x1, 0x58000, [0x2, 0x94, 0x6, 0x5]})
ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f00000009c0)={0x101ff, 0x380, 0x0, &(0x7f00000005c0)=[0x6, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x401, 0xc5d, 0x6, 0x8, 0x6, 0xd4, 0xba7, 0x4, 0xe50d, 0x40, 0xf, 0x7, 0x9, 0x2, 0x3, 0xf, 0xfff, 0x3, 0x57e91023, 0x401, 0x9, 0x5, 0xe, 0x7f, 0x2, 0x8001, 0xffffffffffff610f, 0xff, 0x7f, 0x400, 0x0, 0xfffffffffffffffc, 0x8001, 0xffffffff, 0x8ba2, 0x7559f8e1, 0x2, 0x9, 0x400, 0x8, 0xffffffffffffffff, 0x8, 0x4, 0x7, 0x1e, 0x3e75, 0x1, 0xae, 0x40, 0x7ea73ec5, 0x3, 0xc, 0x8, 0xfffffffffffffff9, 0x1, 0x5, 0xd, 0x0, 0x40, 0x1ff, 0x401, 0x1, 0xfffffffffffffffd, 0x10, 0x1, 0x7fffffffffffffff, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x800, 0x7fff, 0x7, 0x9, 0x7, 0x5, 0x0, 0x5, 0x0, 0x3, 0x5, 0x6, 0x9, 0x7, 0x8, 0x5, 0x1, 0x100000001, 0x7, 0xf, 0x7, 0x2, 0x9672, 0x7, 0xa, 0x80000000, 0x2f, 0x6, 0x2, 0x9, 0x2, 0x3, 0x9, 0x1, 0x1ff, 0x7, 0xc, 0x3, 0xf89a, 0x9, 0x5, 0x80, 0x3, 0x0, 0x1, 0x3, 0x9, 0xff, 0x6, 0x41]})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000a00)={0x8, 0xffffffffffffffff, 0x1})
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x800)
r9 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x9)

43m6.852753519s ago: executing program 0 (id=175):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180), &(0x7f0000000300)=[@featur2], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000080)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000000)=0x1d}) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000200)={0xe4, 0x0, 0x9}) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@mrs={0xbe, 0x18, {0x603000000013806f}}], 0x18}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r9, 0x4000007, 0x31, r10, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c46000/0x2000)=nil, r9, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) (async, rerun: 32)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x12, 0xffffffffffffffff, 0x0)

43m4.842908278s ago: executing program 1 (id=176):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43)
ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20000000)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x5, 0x2, 0x3]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x80086601, 0x20000000)
r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x2, 0x7f, 0x0, 0x1, 0x7, 0x3, 0x4, 0x5a, 0x3, 0x9, 0x3, 0x0, 0xe, 0xf, 0x5, 0xf, 0x5, 0x5, '\x00', 0x4, 0x10000})

42m59.698330708s ago: executing program 0 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_assert_reg(r4, 0x7, 0x81)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0x8, 0x94, '\x00', 0xb7})
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000003c0)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000380)})
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x810, 0xffffffffffffffff, 0x0)

42m56.210414854s ago: executing program 1 (id=178):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x19})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52)

42m14.022904603s ago: executing program 32 (id=177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_assert_reg(r4, 0x7, 0x81)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0x8, 0x94, '\x00', 0xb7})
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000003c0)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000380)})
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x810, 0xffffffffffffffff, 0x0)

42m8.134417308s ago: executing program 33 (id=178):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000000c0)=0x19})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x52)

37m27.053428676s ago: executing program 2 (id=179):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1200, 0x0, 0x1}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013df7c, 0x9}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x254}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0xc, 0x8, 0x4, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x41}}, @svc={0x122, 0x40, {0x1000, [0x7ff, 0x3, 0x100000000, 0x9a8, 0x7]}}, @uexit={0x0, 0x18, 0x7}, @smc={0x1e, 0x40, {0x3000000, [0x1000, 0x9, 0x9, 0x3, 0x3]}}, @hvc={0x32, 0x40, {0x4, [0x57, 0xfff, 0x9, 0x0, 0x1]}}, @hvc={0x32, 0x40, {0xc4000005, [0x8, 0x6, 0x4, 0x1, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013c4d1}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0xb4, {"806794d200c0b8f2610080d2c20180d2430180d2240080d2020000d460cd92d20020b8f2010180d2620180d2a30180d2c40080d2020000d40090800f00000033403e9bd200c0b8f2610080d2220080d2630080d2240180d2020000d4007008d50090200e800093d20000b0f2010180d2e20080d2430180d2a40180d2020000d4605180d20020b0f2410180d2620180d2e30080d2440180d2020000d4008008d5"}}, @uexit={0x0, 0x18, 0xf300000}, @hvc={0x32, 0x40, {0x200, [0x3bc3fd2b, 0x7, 0x6, 0x6, 0x4]}}, @irq_setup={0x46, 0x18, {0x2, 0x58}}, @irq_setup={0x46, 0x18, {0x0, 0x12}}, @mrs={0xbe, 0x18, {0x603000000013c643}}, @uexit={0x0, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0x397}}, @irq_setup={0x46, 0x18, {0x4, 0x222}}, @mrs={0xbe, 0x18, {0x603000000013e6d8}}, @eret={0xe6, 0x18, 0x10000}, @irq_setup={0x46, 0x18, {0x2, 0x115}}, @irq_setup={0x46, 0x18, {0x3, 0x152}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x623, 0x8}}, @svc={0x122, 0x40, {0xc400000e, [0x0, 0x400, 0xfffffffffffffffd, 0x10001, 0x1]}}], 0x49c}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
r8 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x1, &(0x7f0000000200)=0x8080001})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r11, 0x4010aeb5, 0xffffffffffffffff)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140001, &(0x7f0000000000)=0x81})
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bfd000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x2000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

37m21.383571805s ago: executing program 3 (id=180):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f)
r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_SREGS(r8, 0x4000ae84, 0xfffffffffffffffe)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r10 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r9, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
r11 = mmap$KVM_VCPU(&(0x7f0000e6a000/0x2000)=nil, r1, 0xa, 0x810, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000040)="d2e709199612140906d4d36e8bd5a0c7ba49fb5b271f6e87d7a3cbd15501aaf6e80a21d18936b29f2ee5e8db67b0d8da68080478efccc03f73d898f59f96544a1912d430ed7b882f", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

37m11.57606039s ago: executing program 2 (id=181):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0xfffffffffffffffc})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, r5, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
r10 = ioctl$KVM_CREATE_VM(r9, 0x894c, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xb701, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xb701, 0xfffffffffffffffe)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f00004d2000/0x3000)=nil, r12, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)

37m5.360883534s ago: executing program 3 (id=182):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40801, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x3, 0x1, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
close(r1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) (async)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x1, 0x4})

36m56.156216099s ago: executing program 2 (id=183):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x3, 0x5, &(0x7f0000000000)=0x3ff})
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, &(0x7f0000000080)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x116}}, @msr={0x14, 0x20, {0x603000000013df7c, 0x2}}], 0x48}], 0x1, 0x0, &(0x7f0000000140)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xc2, 0xffffffffffffff64, &(0x7f0000000180)=0x4}) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) (rerun: 64)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x800, &(0x7f0000000200)=0x7})
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000002c0)=@arm64_extra={0x603000000013c01b, &(0x7f0000000280)=0x7}) (async, rerun: 64)
ioctl$KVM_RUN(r0, 0xae80, 0x0) (rerun: 64)
ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000300)={0xb6, 0x0, 0x8000000000000001}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x7000, 0x4000, 0x1}) (async)
ioctl$KVM_GET_REGS(r1, 0x8360ae81, &(0x7f00000003c0)) (async, rerun: 32)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async, rerun: 32)
ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000480)={0x7ff, 0xd6}) (async)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, 0x0) (async)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000004c0)={0x6, 0x1ff})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000500)=@arm64={0x2, 0x2, 0x31, '\x00', 0xffffffffffffffff})
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000580)=@other={0x533, &(0x7f0000000540)=0xa}) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r3, 0x4, 0x30, r4, 0x0) (async, rerun: 64)
r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (rerun: 64)
ioctl$KVM_SET_SREGS(r5, 0x4000ae84, &(0x7f00000005c0)={{0x70000, 0x537b63dbc511c88c, 0xb, 0x1, 0x0, 0x2, 0x7, 0xc2, 0xfc, 0xb5, 0x1, 0x1d}, {0x0, 0x10000, 0xd, 0x1, 0x1, 0x8, 0xa, 0x3, 0x9, 0x50, 0x5, 0xa4}, {0x41000, 0x30000, 0x3, 0x10, 0x6, 0xa, 0x2, 0xfd, 0x0, 0x9, 0x6, 0x7}, {0x60000, 0xf000, 0x2, 0x5, 0x2, 0x3, 0xe, 0x7, 0x2, 0x40, 0x0, 0x7f}, {0xb000, 0x9000, 0x9, 0x8, 0x3, 0x4, 0x14, 0x6, 0x6, 0x4, 0x5, 0x6}, {0x54000, 0x200000, 0xd, 0x1, 0x3a, 0x4, 0x6, 0x6, 0x0, 0xe4, 0x7, 0x6}, {0x26000, 0xec057e1f4a0b7c42, 0x10, 0x6e, 0x3, 0x9, 0x1, 0x3, 0x5, 0xe1, 0x6}, {0xd004, 0x30000, 0xc, 0x9, 0x8, 0x9, 0x7, 0x96, 0x40, 0x2, 0xe, 0xd}, {0x100000, 0x2}, {0x75000, 0xc}, 0xa0000022, 0x0, 0x0, 0x6000, 0x1, 0x100, 0x8000, [0x1, 0x5929, 0x0, 0x10001]}) (async, rerun: 32)
ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f0000000700)={{0xf000, 0x100000, 0x9, 0x0, 0x2, 0xb, 0x53, 0xff, 0x8, 0xc, 0x4, 0x5}, {0x80a0000, 0xdddd1000, 0xd, 0xf8, 0xfc, 0xc, 0xf8, 0x10, 0x0, 0xe5, 0xb, 0x6}, {0xdddd1000, 0x0, 0xa, 0x9, 0x34, 0x4, 0x1, 0x8, 0x8, 0x0, 0x0, 0x1}, {0xeeee0000, 0xd5c51801, 0xa, 0x5, 0x40, 0x8, 0xb0, 0x4, 0x93, 0xf, 0x96, 0x55}, {0x41000, 0x2000, 0xb, 0xa, 0x5, 0x2, 0x9, 0xfd, 0x4, 0x72, 0xce, 0x7}, {0x6000, 0x4, 0x4, 0x1, 0x4, 0x29, 0x5, 0x1, 0x2, 0xa4, 0x4, 0x6}, {0x54000, 0x9000, 0x10, 0x66, 0x23, 0xb, 0xfc, 0x80, 0x81, 0x81, 0x3, 0x1}, {0x4000, 0x2000, 0xd, 0x4, 0x0, 0x5b, 0x10, 0xfa, 0x1, 0x5, 0x7, 0x5}, {0x2000}, {0x10000, 0x9}, 0x0, 0x0, 0x0, 0x10008, 0x7, 0x0, 0x4, [0x295, 0x11, 0x8, 0xc000000000000000]}) (rerun: 32)
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x4000, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)

36m54.762068839s ago: executing program 3 (id=184):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000002000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x8, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r9 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x40305829, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x2, 0x0})
r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x8, 0x128, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, <r12=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x2, 0x4, 0x0})

36m45.658343953s ago: executing program 2 (id=185):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x200000, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000000)=0x6})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x0, 0x0, 0x4000010, r2, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x8600ff01, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)

36m37.548389728s ago: executing program 3 (id=186):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4001000000000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000001c0)=@arm64_sve={0x6080000000150008, 0x0})
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x32)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3fe})
ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r10})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
close(r0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x40, 0xfffffffffffffff1, &(0x7f0000000300)=0xf9})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

36m24.844364965s ago: executing program 2 (id=187):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
r5 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r5, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001501b7, &(0x7f0000000180)=0x5})
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000007)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r11, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r12, 0xffffffffffffffff)
syz_kvm_assert_reg(r11, 0x6030000000138012, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138004, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138014, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138024, 0x8000)
syz_kvm_assert_reg(r11, 0x603000000013802c, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138005, 0x8000)
syz_kvm_assert_reg(r11, 0x603000000013800d, 0x8000)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

35m50.660706162s ago: executing program 34 (id=186):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4001000000000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000003c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000001c0)=@arm64_sve={0x6080000000150008, 0x0})
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x32)
r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3fe})
ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r10})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
close(r0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000240)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x40, 0xfffffffffffffff1, &(0x7f0000000300)=0xf9})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

35m34.817065076s ago: executing program 35 (id=187):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
r5 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r5, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sve={0x60800000001501b7, &(0x7f0000000180)=0x5})
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000007)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r11, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r12, 0xffffffffffffffff)
syz_kvm_assert_reg(r11, 0x6030000000138012, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138004, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138014, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138024, 0x8000)
syz_kvm_assert_reg(r11, 0x603000000013802c, 0x8000)
syz_kvm_assert_reg(r11, 0x6030000000138005, 0x8000)
syz_kvm_assert_reg(r11, 0x603000000013800d, 0x8000)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

29m39.701111433s ago: executing program 5 (id=189):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x42402, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x4, <r14=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r14, 0x4018aee3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r14, 0x4018aee3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
close(r10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r15, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0})

29m16.640220406s ago: executing program 5 (id=193):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x5, 0x2, 0x3]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) (async, rerun: 64)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x3550, 0x3}}], 0x58}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

29m3.413482384s ago: executing program 5 (id=195):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x200000c, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000018)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0xa612, 0x1, 0x0, 0x2000, &(0x7f0000d09000/0x2000)=nil})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0x8000})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

28m51.750039884s ago: executing program 5 (id=196):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000140))

28m4.828305554s ago: executing program 36 (id=196):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000140))

19m45.97191936s ago: executing program 6 (id=231):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x4)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, <r11=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
close(r8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001500ab, &(0x7f0000000180)=0x100947c})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bfd000/0x400000)=nil)

19m34.74827452s ago: executing program 4 (id=232):
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000400)={0x1ff, 0x80, 0x40, &(0x7f0000000000)=[0x2, 0x8000000000000000, 0x4, 0x2, 0x8000000000000000, 0x9, 0x1, 0x80000001, 0x8000000000000001, 0x80000000, 0x3, 0x48a, 0x5, 0x8000000000000001, 0xe, 0xfb9, 0x5, 0x74ec, 0x1, 0x200, 0x8, 0x6217, 0x40, 0x80, 0x2c6, 0xfffffffffffffee1, 0x224, 0x80, 0x1, 0xffffffffffffffff, 0xfb12, 0x2, 0x3, 0x5, 0x28, 0x800, 0x2, 0x0, 0x7976, 0x8, 0x4, 0xac, 0x9, 0x4b, 0x9, 0x5, 0x7f, 0x2, 0xffff, 0x4, 0x8, 0x800, 0x0, 0x3, 0xf, 0x6, 0x9, 0x6, 0xffffffffffffffff, 0x7, 0x1a0, 0x9, 0x7, 0x80, 0x8, 0x9, 0x4, 0x8000000000000001, 0x4, 0x4, 0xebaa, 0x4, 0xb8b, 0x2, 0x800000000000, 0x100000001, 0x280, 0xe000000, 0x7, 0x5, 0x0, 0xd, 0x6, 0xd80, 0x400, 0xd2, 0x400, 0x8, 0x6, 0xa, 0x3, 0x5, 0x2, 0x3, 0x5, 0x8, 0x8, 0x2, 0x810f, 0x8000, 0x16d5e460, 0x18d78ba2, 0xe, 0x800, 0x8, 0x9, 0x9, 0x3, 0xc, 0x9, 0x2, 0x8, 0x9, 0xe, 0x5, 0xccc, 0x9, 0x316a, 0x828e, 0x6, 0x9, 0xc3, 0x7fffffffffffffff, 0x3, 0xfffffffffffffff5, 0x5, 0x3, 0x8]})
syz_kvm_vgic_v3_setup(r0, 0x4, 0x20)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000440)={0x9, 0xffffffffffffffff, 0xd8dd6e64af18a5cf})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000480)={0x10200, 0x4, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x7f, r0})
eventfd2(0x4, 0x80001)
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000540)={0xeeef0000, 0x1000, 0x80, 0x1, 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000580)={0x3, 0xe9})
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000005c0)={0x2, 0x2})
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000600)=[@mrs={0xbe, 0x18, {0x603000000013f288}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x4, 0xe, 0x3}}, @uexit={0x0, 0x18, 0x6c6}, @uexit={0x0, 0x18, 0x10000}, @code={0xa, 0x3c, {"000028d50020204e000028d5008008d5000040ad0028c01a000008d5007008d500082038007008d5"}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x1c1}}, @irq_setup={0x46, 0x18, {0x1, 0x21e}}, @msr={0x14, 0x20, {0x603000000013c2aa, 0x1}}, @hvc={0x32, 0x40, {0x84000004, [0x401, 0x174, 0x7, 0x200, 0x5]}}, @code={0xa, 0x84, {"200f88d20080b0f2410080d2620080d2430080d2e40180d2020000d4e003002a007008d5007008d51f000031a0a99bd200e0b0f2410180d2a20080d2030080d2440180d2020000d4008008d5007008d5807183d20060b0f2e10180d2020180d2630180d2840180d2020000d4000860bc"}}, @msr={0x14, 0x20, {0x603000000013e64a, 0x9}}, @code={0xa, 0x9c, {"000028d50004000e008008d5007008d5008008d5609187d200a0b0f2a10080d2020180d2630080d2e40080d2020000d40008603cc0af80d20060b8f2610180d2c20080d2030080d2840080d2020000d480b397d20040b8f2010080d2620080d2a30080d2840180d2020000d440b29fd20060b8f2410080d2e20180d2430180d2240180d2020000d4"}}, @svc={0x122, 0x40, {0x84000001, [0x8, 0x8, 0x0, 0x7, 0x80000000]}}, @msr={0x14, 0x20, {0x1f78, 0x10}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x89d}}, @svc={0x122, 0x40, {0x84000004, [0x2, 0x3, 0x3ff, 0x7, 0x1]}}, @eret={0xe6, 0x18, 0x51}, @smc={0x1e, 0x40, {0x84000051, [0x1, 0xf6fa, 0x9, 0x7, 0x1]}}, @uexit={0x0, 0x18, 0x40}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0x1, 0x8001, 0x7}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc0, 0x9, 0xc}}, @code={0xa, 0x84, {"000028d5607f97d20080b8f2210080d2c20080d2830180d2e40180d2020000d40300a0d4e003006be0028ed200a0b0f2a10080d2620080d2830180d2e40180d2020000d4000000bc007008d540b483d20080b8f2610080d2420080d2230180d2240180d2020000d4008008d50004c078"}}, @svc={0x122, 0x40, {0x84000000, [0x4, 0x8000000000000001, 0x1, 0xd7f, 0x7]}}, @svc={0x122, 0x40, {0x44000002, [0x7, 0x2, 0x3, 0x0, 0x4502]}}, @code={0xa, 0x84, {"0080400c008008d5a0bf8bd20060b8f2a10080d2020180d2e30080d2e40080d2020000d4000008d5000028d5803282d200c0b0f2010080d2a20080d2630080d2640080d2020000d40000669ee0079f1a000028d5208289d20080b0f2010180d2c20180d2830080d2440080d2020000d4"}}, @eret={0xe6, 0x18, 0x100000001}, @eret={0xe6, 0x18, 0xda81}, @svc={0x122, 0x40, {0x8400000b, [0xe6, 0x1, 0x8e0, 0x4, 0x5]}}, @svc={0x122, 0x40, {0x200, [0x0, 0x3, 0x0, 0x5, 0x3]}}, @hvc={0x32, 0x40, {0x84000053, [0xfffffffffffff89f, 0x0, 0x2, 0x9000000, 0x7]}}], 0x69c}, &(0x7f0000000d00)=[@featur2={0x1, 0x41}], 0x1)
r5 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r3, 0x1000008, 0x12, r4, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000e80)={0x0, &(0x7f0000000d40)=[@code={0xa, 0x84, {"0200a0d4007008d500d8a05e0060202e00a0c00d20e298d200e0b0f2810080d2c20180d2430180d2e40180d2020000d4a04397d200c0b8f2610180d2e20180d2230080d2040180d2020000d4e09783d200e0b0f2810080d2c20180d2a30080d2240180d2020000d4007008d5000028d5"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0xb, 0xb2, 0x5, 0x4}}, @eret={0xe6, 0x18, 0xfffffffffffffffb}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x5, 0x8}}, @msr={0x14, 0x20, {0x603000000013e089, 0x7}}], 0x114}, &(0x7f0000000ec0)=[@featur1={0x1, 0x95}], 0x1)
r8 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r0, 0x4068aea3, &(0x7f0000000f00)={0xe4, 0x0, 0x800})
ioctl$KVM_ARM_PREFERRED_TARGET(r7, 0x8020aeaf, &(0x7f0000000f80))
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000001000)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000fc0)=0x10})
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000001380)={0x0, &(0x7f0000001040)=[@uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013df5e, 0x80000001}}, @uexit={0x0, 0x18, 0x100}, @memwrite={0x6e, 0x30, @generic={0xa000, 0xfad, 0xada9, 0x4}}, @eret={0xe6, 0x18, 0x5}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x2c3}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x1, 0x0, 0x2, 0x9, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x8, 0x6, 0x7f, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x5, 0x8, 0xfffeffff}}, @hvc={0x32, 0x40, {0x80008000, [0x0, 0x2, 0x0, 0x9, 0x9]}}, @msr={0x14, 0x20, {0x603000000013c113, 0x2000000000000000}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1600, 0xfffffffffffffffa, 0x8}}, @eret={0xe6, 0x18, 0x2}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @msr={0x14, 0x20, {0x603000000013c65d, 0x3ff}}, @msr={0x14, 0x20, {0x603000000013f510, 0x6}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0xe, 0x1, 0xfffffff7, 0x1}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x1ac}}, @mrs={0xbe, 0x18, {0x603000000013e510}}, @msr={0x14, 0x20, {0x603000000013df7c, 0x800}}, @svc={0x122, 0x40, {0xc4000005, [0x7f, 0x80000000, 0x5, 0x7, 0xc01]}}, @hvc={0x32, 0x40, {0x1, [0x1ff, 0xdd, 0x7, 0x5, 0x28d800000]}}], 0x340}, &(0x7f00000013c0)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000001680)={0x0, &(0x7f0000001400)=[@code={0xa, 0x84, {"605485d20000b8f2810180d2a20080d2030080d2440180d2020000d4e0cc8fd200a0b0f2010080d2620080d2630180d2840180d2020000d40088200e000028d5000000ca007008d5007008d5007008d580c48ad200e0b0f2010180d2220080d2430180d2c40180d2020000d4008008d5"}}, @irq_setup={0x46, 0x18, {0x0, 0x2e4}}, @irq_setup={0x46, 0x18, {0x3, 0x3d0}}, @code={0xa, 0xb4, {"007008d5007008d500000033c0098cd200e0b0f2210180d2620080d2030180d2440080d2020000d420a59dd20040b8f2e10080d2220080d2830080d2440080d2020000d4804e89d20040b8f2810180d2820180d2430080d2a40180d2020000d400cd9cd200c0b0f2c10080d2c20080d2430080d2c40180d2020000d4a00385d200c0b0f2e10080d2620180d2a30080d2840080d2020000d4007008d5007008d5"}}, @hvc={0x32, 0x40, {0xc4000007, [0x5c53, 0x4, 0x7fff, 0x2, 0x8a]}}, @eret={0xe6, 0x18, 0xc3c}, @msr={0x14, 0x20, {0x603000000013df55, 0x9}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x37f}}, @msr={0x14, 0x20, {0x603000000013f667, 0x9}}, @svc={0x122, 0x40, {0x84000009, [0x3ff, 0x8, 0x3, 0x6, 0x6]}}], 0x268}, &(0x7f00000016c0)=[@featur1={0x1, 0x7}], 0x1)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000001700)={0xa8, 0x0, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000001780)="d58c11128c3f3f99ed5a32376d3500aac18193ba065bc02010f8b3efa0f8b437381a096361af8211da3a511ac52435080899894de19fed20ebc83ebfa5baff3bd401afa7e59c3153", 0x0, 0x48)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000001800))
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x7)
ioctl$KVM_GET_SREGS(r9, 0x8000ae83, &(0x7f0000001880))

19m22.344612279s ago: executing program 6 (id=233):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000000)=[@featur2], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0})

19m21.126283841s ago: executing program 4 (id=234):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x7, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0xffffffffffffffff)

19m8.107915782s ago: executing program 6 (id=235):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x3}) (async)
r2 = eventfd2(0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r5}) (async)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r2, 0x4})
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, &(0x7f0000000140)) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x16, 0x4, 0x1}})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x7, 0x9, 0x8, 0xfffffffffffffff8, 0x100]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

19m7.628695749s ago: executing program 4 (id=236):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7})
ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000240)={0x0, 0x8})
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}})
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x100000c, 0x10010, 0xffffffffffffffff, 0x0)

18m49.82153377s ago: executing program 6 (id=237):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r3, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)

18m47.108573841s ago: executing program 4 (id=238):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x60100, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r4, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r7, 0xfffffffffffffffe)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b40)={0x0, &(0x7f0000000300)=[@code={0xa, 0x84, {"008008d5008008d5007008d5a0b59dd20060b0f2410080d2820080d2e30180d2e40180d2020000d41f00006a007008d50080c0c8602d80d20000b0f2610180d2220080d2430080d2840180d2020000d4e0cf95d20080b8f2010080d2c20080d2830180d2040180d2020000d400000079"}}, @smc={0x1e, 0x40, {0x4000000, [0x2, 0x7b, 0x1, 0x5, 0x9]}}, @code={0xa, 0xb4, {"004f9dd200e0b8f2a10180d2020080d2030080d2240080d2020000d480919dd200c0b8f2410180d2e20180d2830080d2640180d2020000d40020a00d0000000c404081d20060b8f2810080d2e20080d2030080d2240180d2020000d4000028d5604a8bd20020b8f2e10180d2620180d2a30180d2c40080d2020000d4806385d20060b8f2610180d2420180d2230180d2040080d2020000d4007008d5000008d5"}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x37}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x10, 0x100, 0x8}}, @msr={0x14, 0x20, {0x603000000013c520, 0xb}}, @mrs={0xbe, 0x18, {0x603000000013df00}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x3, 0x6, 0x5, 0x9c, 0x2}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x32c}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf20, 0x3ff, 0x5}}, @code={0xa, 0xe4, {"402286d20020b0f2010080d2420080d2230080d2c40080d2020000d440c68dd20040b0f2c10180d2220080d2a30080d2040080d2020000d460bb90d20020b8f2a10180d2820080d2430180d2840080d2020000d4005786d200a0b0f2810080d2820180d2a30080d2c40080d2020000d460029ad200e0b0f2a10180d2e20080d2230080d2e40080d2020000d40054200e007008d5004492d200a0b8f2410080d2c20080d2830180d2840180d2020000d420cf91d20040b8f2c10180d2e20180d2230180d2c40080d2020000d4007008d5"}}, @mrs={0xbe, 0x18, {0x603000000013deac}}, @code={0xa, 0x9c, {"e003006b0098207e000c00b820b182d200c0b0f2e10080d2a20180d2e30180d2440080d2020000d40070df0c80df9ed200c0b0f2a10080d2820180d2c30080d2240080d2020000d40044c01a40d28dd20020b0f2810180d2220080d2630180d2240080d2020000d4000028d5806d82d20000b0f2810180d2020080d2e30180d2040080d2020000d4"}}, @code={0xa, 0x6c, {"000008d5008008d50038000e0004c078000040f9802a92d200c0b8f2210080d2620080d2630180d2440180d2020000d400008012e0b99bd200c0b0f2e10080d2420180d2430080d2240080d2020000d40000bf0d00c8217e"}}, @mrs={0xbe, 0x18, {0x603000000013dce4}}, @smc={0x1e, 0x40, {0xc4000014, [0x4, 0xab, 0x7, 0x80000001, 0x9]}}, @uexit={0x0, 0x18, 0xc}, @irq_setup={0x46, 0x18, {0x3, 0x2ba}}, @msr={0x14, 0x20, {0x603000000013df6e, 0xda7}}, @memwrite={0x6e, 0x30, @generic={0x2, 0x653, 0x101, 0x9}}, @hvc={0x32, 0x40, {0x84000051, [0x7, 0x80000001, 0x70a2, 0x3, 0xa]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0x9, 0x8, 0x4e6815ee, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xc, 0x4, 0x1, 0x4}}, @hvc={0x32, 0x40, {0xc4000007, [0x4, 0x9, 0xf917, 0x2, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x399}}, @svc={0x122, 0x40, {0xc4000003, [0x9, 0x100000000, 0x1, 0x6, 0x5]}}, @hvc={0x32, 0x40, {0x5000984d, [0x5, 0x7, 0x100000, 0x0, 0x5886]}}, @irq_setup={0x46, 0x18, {0x4, 0x3c3}}, @code={0xa, 0xcc, {"007008d50000c069006e83d20060b0f2c10080d2820080d2830080d2640180d2020000d400f8302e0050202ea0dd98d200a0b0f2810080d2e20180d2230180d2840080d2020000d4400099d20040b0f2c10180d2220080d2030080d2c40180d2020000d4603a9cd20080b8f2010080d2c20080d2230180d2c40180d2020000d480c786d20020b8f2c10080d2020180d2430180d2040080d2020000d4a09f8cd20080b0f2210180d2220080d2030080d2a40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x54}}, @memwrite={0x6e, 0x30, @generic={0x9000, 0x55, 0x0, 0x5}}], 0x808}, &(0x7f0000000b80)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r15 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x1, 0x300, &(0x7f0000000000)=0xd46})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000280)=0x3})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(r0, 0x40086602, 0x400)

18m25.639128028s ago: executing program 4 (id=239):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0x200, [0x2, 0x467, 0xf, 0x401, 0x3]}}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x13c}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xdb71b7fd28046e1c, 0xb, 0x6}}, @smc={0x1e, 0x40, {0x8400000d, [0x1456, 0x100000000, 0x0, 0x5, 0x5]}}, @svc={0x122, 0x40, {0x6000000, [0xe3, 0x5, 0x1ff, 0x2, 0x10]}}, @irq_setup={0x46, 0x18, {0x2, 0x145}}, @smc={0x1e, 0x40, {0x84000012, [0x7f, 0x101, 0x7, 0xb7, 0x3]}}, @hvc={0x32, 0x40, {0xc4000014, [0x65a, 0x0, 0x1000, 0xf, 0xffffffffffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x23}}, @irq_setup={0x46, 0x18, {0x0, 0x2de}}, @smc={0x1e, 0x40, {0x2000, [0xe30, 0x0, 0x3, 0x86f, 0xd]}}], 0x250}, &(0x7f00000000c0)=[@featur1={0x1, 0x66}], 0x1)
ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) (async)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) (async)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0xf0780000002e2172, 0x0}) (async)
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000001)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(0xffffffffffffffff, 0x4010aeb5, &(0x7f00000002c0)={0x200})

18m20.089687824s ago: executing program 6 (id=240):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0xffff10c0, 0x801) (async)
r5 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8086000, 0x0, r5})
r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000002, [0x4, 0x3, 0x80, 0xff, 0x80000004]}}], 0x40}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) (async)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_RUN(r15, 0x8000ae8c, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r12, 0xffffffffffffffff) (async)
syz_kvm_assert_syzos_uexit$arm64(r12, 0xffffffffffffffff)
syz_kvm_assert_reg(r10, 0x603000000013df40, 0x8000)
r16 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r16, 0x2, 0x100)
eventfd2(0x10000, 0x0) (async)
r17 = eventfd2(0x10000, 0x0)
ioctl$KVM_IRQFD(r16, 0x4020ae76, &(0x7f0000000000)={r17, 0x3}) (async)
ioctl$KVM_IRQFD(r16, 0x4020ae76, &(0x7f0000000000)={r17, 0x3})

18m9.93195844s ago: executing program 4 (id=241):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x264b42, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f0000000240)=0x4})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004299"], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000240), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31)
r11 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000000038)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x602000000011000a, &(0x7f00000001c0)=0x100000001})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil)

18m4.763992918s ago: executing program 6 (id=242):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0xffff10c0, 0x801) (async)
r3 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3})
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x2d, 0x2, r3})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700000400", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000dbf000/0x4000)=nil, 0x930, 0x1000001, 0x20010, r8, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000006) (async)
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000006)
r10 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r11 = openat$kvm(0x0, &(0x7f0000000180), 0x1cbf82, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

17m23.148189926s ago: executing program 37 (id=241):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x264b42, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f0000000240)=0x4})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004299"], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000240), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31)
r11 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000000000038)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x602000000011000a, &(0x7f00000001c0)=0x100000001})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$arm64(r18, &(0x7f0000c00000/0x400000)=nil)

17m15.650506357s ago: executing program 38 (id=242):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
eventfd2(0xffff10c0, 0x801) (async)
r3 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3}) (async)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3})
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x2d, 0x2, r3})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r8, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700000400", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000dbf000/0x4000)=nil, 0x930, 0x1000001, 0x20010, r8, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000006) (async)
ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000006)
r10 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r11 = openat$kvm(0x0, &(0x7f0000000180), 0x1cbf82, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

3m18.068148836s ago: executing program 7 (id=277):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x140)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000bde000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x4, 0x220)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
r14 = eventfd2(0x0, 0x0)
close(r14)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
write$eventfd(r14, &(0x7f0000000180)=0x5, 0xfffffde3)

2m45.537562647s ago: executing program 7 (id=280):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x400)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfd000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@svc={0x122, 0x40, {0x84000007, [0x5, 0x0, 0x7fffffff, 0x3]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m40.926504274s ago: executing program 8 (id=281):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = eventfd2(0x4, 0x80000)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1, 0x3})
write$eventfd(r1, &(0x7f0000000140)=0x3, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80180, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0x5450, 0x0)

2m28.881354573s ago: executing program 7 (id=282):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, &(0x7f00000000c0)=0x8000}) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000140)=@arm64={0x2, 0x3, 0x1, '\x00', 0x6}) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x40)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) (async)
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000000)=@attr_other={0x0, 0x5, 0x4, &(0x7f00000000c0)=0x8})

2m23.932321273s ago: executing program 8 (id=283):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x6030000000138064, 0x0}) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(r4, 0xb702, 0x0) (rerun: 32)
openat$kvm(0x0, &(0x7f0000000080), 0x141001, 0x0) (async)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100))
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1})
r11 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r8, 0x2, 0x100)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2m6.909630716s ago: executing program 7 (id=284):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000000)=0x81})
r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xc0189436, 0x36)
ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x1000000, 0x12, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r14, 0x2000007, 0x13, 0xffffffffffffffff, 0x0)
openat$kvm(0x0, 0x0, 0x2000, 0x0)
r15 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, 0x0, 0x300000a, 0x810, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x600000e, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r14, 0x0, 0x5c1fd1b656592f1, r12, 0x0)

2m2.118870041s ago: executing program 8 (id=285):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x10002, 0x1, 0xeeee0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x8001, 0x4}}], 0x28}, 0x0, 0x0)
r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000000)=0x3}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfd000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x4, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r14 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x29)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x5) (async)
r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04)
r18 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r17, 0x2, 0x12, r16, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r17, 0x100000a, 0x12, r16, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r18, 0x20, &(0x7f00000001c0)="fb016b03002e5ee42ec6a29ea6ab8000000004ef0000c20cecf80a97ab78000000040000000000000000409700000000ffffffff00000000a0eb00df00", 0x0, 0xffffffffffffff69)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x8})

1m38.196149501s ago: executing program 7 (id=286):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd2(0xeffffffd, 0x801) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
write$eventfd(r6, &(0x7f00000001c0), 0xe80) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x58) (async)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) (async)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
openat$kvm(0x0, 0x0, 0x80200, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_ARM_VCPU_FINALIZE(r10, 0x4004aec2, 0x0) (async)
r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x8003}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1m37.129556609s ago: executing program 8 (id=287):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x1, 0x30000, 0x0, r2})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})

1m20.356338467s ago: executing program 8 (id=288):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0xffffffffffffff42)
close(0x4)
close(0x5)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x200000, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x141000, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000000)={0x7, 0x2})
r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x8040aeb6, 0xfffffffffffffffe)

1m19.859618837s ago: executing program 7 (id=289):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = eventfd2(0x8801, 0x800)
r9 = eventfd2(0x400, 0x1)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r9, 0x5, 0x2, r9})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r8, 0x5, 0x0, r8})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200))
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
eventfd2(0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_SREGS(r12, 0x8000ae83, &(0x7f00000004c0))
ioctl$KVM_GET_ONE_REG(r17, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100008, &(0x7f0000000240)=0x2})
ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0xe000, 0x0, r9, 0xc})

47.968395785s ago: executing program 8 (id=290):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)

30.779165005s ago: executing program 39 (id=289):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = eventfd2(0x8801, 0x800)
r9 = eventfd2(0x400, 0x1)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r9, 0x5, 0x2, r9})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r8, 0x5, 0x0, r8})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200))
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
eventfd2(0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_SREGS(r12, 0x8000ae83, &(0x7f00000004c0))
ioctl$KVM_GET_ONE_REG(r17, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100008, &(0x7f0000000240)=0x2})
ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0xe000, 0x0, r9, 0xc})

0s ago: executing program 40 (id=290):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[  392.659240][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.118663][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:55859' (ED25519) to the list of known hosts.
[  597.581404][   T25] audit: type=1400 audit(596.780:60): avc:  denied  { name_bind } for  pid=3332 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  598.470514][   T25] audit: type=1400 audit(597.670:61): avc:  denied  { execute } for  pid=3333 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  598.490507][   T25] audit: type=1400 audit(597.690:62): avc:  denied  { execute_no_trans } for  pid=3333 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  618.319017][   T25] audit: type=1400 audit(617.510:63): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  618.387258][   T25] audit: type=1400 audit(617.570:64): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  618.462268][ T3333] cgroup: Unknown subsys name 'net'
[  618.539265][   T25] audit: type=1400 audit(617.740:65): avc:  denied  { unmount } for  pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  619.020866][ T3333] cgroup: Unknown subsys name 'cpuset'
[  619.153902][ T3333] cgroup: Unknown subsys name 'rlimit'
[  620.082055][   T25] audit: type=1400 audit(619.280:66): avc:  denied  { setattr } for  pid=3333 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  620.103853][   T25] audit: type=1400 audit(619.300:67): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  620.129014][   T25] audit: type=1400 audit(619.330:68): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  621.140175][ T3337] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  621.161527][   T25] audit: type=1400 audit(620.360:69): avc:  denied  { relabelto } for  pid=3337 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  621.189614][   T25] audit: type=1400 audit(620.390:70): avc:  denied  { write } for  pid=3337 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  621.362670][   T25] audit: type=1400 audit(620.560:71): avc:  denied  { read } for  pid=3333 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  621.386036][   T25] audit: type=1400 audit(620.580:72): avc:  denied  { open } for  pid=3333 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  621.428657][ T3333] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  672.185859][   T25] audit: type=1400 audit(671.370:73): avc:  denied  { execmem } for  pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  676.443985][   T25] audit: type=1400 audit(675.640:74): avc:  denied  { read } for  pid=3340 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  676.480420][   T25] audit: type=1400 audit(675.680:75): avc:  denied  { open } for  pid=3340 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  676.550248][   T25] audit: type=1400 audit(675.750:76): avc:  denied  { mounton } for  pid=3340 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  676.810230][   T25] audit: type=1400 audit(676.000:77): avc:  denied  { module_request } for  pid=3340 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  676.824283][   T25] audit: type=1400 audit(676.020:78): avc:  denied  { module_request } for  pid=3341 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  677.790756][   T25] audit: type=1400 audit(676.990:79): avc:  denied  { sys_module } for  pid=3340 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  701.181679][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.620279][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.168673][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.630861][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.203321][ T3341] hsr_slave_0: entered promiscuous mode
[  715.232940][ T3341] hsr_slave_1: entered promiscuous mode
[  716.080487][ T3340] hsr_slave_0: entered promiscuous mode
[  716.110596][ T3340] hsr_slave_1: entered promiscuous mode
[  716.139989][ T3340] debugfs: 'hsr0' already exists in 'hsr'
[  716.156126][ T3340] Cannot create hsr debugfs directory
[  721.427015][   T25] audit: type=1400 audit(720.620:80): avc:  denied  { create } for  pid=3341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  721.496823][   T25] audit: type=1400 audit(720.690:81): avc:  denied  { write } for  pid=3341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  721.553823][   T25] audit: type=1400 audit(720.750:82): avc:  denied  { read } for  pid=3341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  721.713175][ T3341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  722.069890][ T3341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  722.308099][ T3341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  722.590855][ T3341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  724.038814][ T3340] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  724.211232][ T3340] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  724.449702][ T3340] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  724.677496][ T3340] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  736.171250][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.233070][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.469227][ T3341] veth0_vlan: entered promiscuous mode
[  792.888514][ T3341] veth1_vlan: entered promiscuous mode
[  794.439554][ T3340] veth0_vlan: entered promiscuous mode
[  795.302491][ T3340] veth1_vlan: entered promiscuous mode
[  795.382119][ T3341] veth0_macvtap: entered promiscuous mode
[  795.833982][ T3341] veth1_macvtap: entered promiscuous mode
[  797.488871][ T3340] veth0_macvtap: entered promiscuous mode
[  797.891227][ T3340] veth1_macvtap: entered promiscuous mode
[  798.329569][ T3393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  798.391973][ T3393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  798.407855][ T3393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  798.427226][ T3393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  800.922078][   T25] audit: type=1400 audit(800.120:83): avc:  denied  { mount } for  pid=3341 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  801.049598][ T3390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.053430][ T3390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.071379][ T3390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.089848][ T3390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.201180][   T25] audit: type=1400 audit(800.340:84): avc:  denied  { mounton } for  pid=3341 comm="syz-executor" path="/syzkaller.9x5oPw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  801.386596][   T25] audit: type=1400 audit(800.580:85): avc:  denied  { mount } for  pid=3341 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  801.852921][   T25] audit: type=1400 audit(801.040:86): avc:  denied  { mounton } for  pid=3341 comm="syz-executor" path="/syzkaller.9x5oPw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  802.011604][   T25] audit: type=1400 audit(801.210:87): avc:  denied  { mounton } for  pid=3341 comm="syz-executor" path="/syzkaller.9x5oPw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  802.631728][   T25] audit: type=1400 audit(801.830:88): avc:  denied  { unmount } for  pid=3341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  802.904020][   T25] audit: type=1400 audit(802.060:89): avc:  denied  { mounton } for  pid=3341 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  803.033749][   T25] audit: type=1400 audit(802.230:90): avc:  denied  { mount } for  pid=3341 comm="syz-executor" name="/" dev="gadgetfs" ino=3814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  803.460406][   T25] audit: type=1400 audit(802.660:91): avc:  denied  { mount } for  pid=3341 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  803.496723][   T25] audit: type=1400 audit(802.690:92): avc:  denied  { mounton } for  pid=3341 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  804.271743][ T3341] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  813.702854][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  813.710780][   T25] audit: type=1400 audit(812.860:97): avc:  denied  { read } for  pid=3497 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  813.730725][   T25] audit: type=1400 audit(812.900:98): avc:  denied  { open } for  pid=3497 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  814.032234][   T25] audit: type=1400 audit(813.230:99): avc:  denied  { ioctl } for  pid=3497 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  819.464010][   T25] audit: type=1400 audit(818.660:100): avc:  denied  { execute } for  pid=3497 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  828.068008][   T25] audit: type=1400 audit(827.270:101): avc:  denied  { append } for  pid=3504 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  868.928526][ T3526] kvm [3526]: Failed to find VMA for hva 0x21016000
[  896.679740][   T25] audit: type=1400 audit(895.850:102): avc:  denied  { ioctl } for  pid=3537 comm="syz.1.13" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  909.438479][   T25] audit: type=1400 audit(908.620:103): avc:  denied  { write } for  pid=3540 comm="syz.0.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  950.557417][ T3572] KVM: debugfs: duplicate directory 3572-6
[  986.818352][   T25] audit: type=1400 audit(985.990:104): avc:  denied  { execute } for  pid=3590 comm="syz.0.29" path=2F31332FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  994.113285][   T25] audit: type=1400 audit(993.310:105): avc:  denied  { map } for  pid=3593 comm="syz.1.30" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  994.163812][   T25] audit: type=1400 audit(993.360:106): avc:  denied  { execute } for  pid=3593 comm="syz.1.30" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1000.240413][ T3597] kvm [3597]: Failed to find VMA for hva 0x20c01000
[ 1000.449266][ T3597] kvm [3597]: Failed to find VMA for hva 0x20c01000
[ 1203.892049][ T3715] debugfs: 'vgic-its-state@8080000' already exists in '3715-5'
[ 1270.985568][   T25] audit: type=1400 audit(1270.140:107): avc:  denied  { create } for  pid=3760 comm="syz.0.84" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1271.052269][   T25] audit: type=1400 audit(1270.250:108): avc:  denied  { map } for  pid=3760 comm="syz.0.84" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=8569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1271.131905][   T25] audit: type=1400 audit(1270.310:109): avc:  denied  { read } for  pid=3760 comm="syz.0.84" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=8569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1281.060686][ T3766] kvm [3766]: Failed to find VMA for hva 0x21016000
[ 1573.252097][ T3940] KVM: debugfs: duplicate directory 3940-7
[ 1647.981109][ T3991] kvm [3991]: Failed to find VMA for hva 0x21016000
[ 1730.987408][   T25] audit: type=1400 audit(1730.180:110): avc:  denied  { setattr } for  pid=4044 comm="syz.1.176" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1838.559056][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1838.760113][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1848.157000][ T4063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1848.468812][ T4063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1865.476274][ T4059] hsr_slave_0: entered promiscuous mode
[ 1865.540005][ T4059] hsr_slave_1: entered promiscuous mode
[ 1865.626501][ T4059] debugfs: 'hsr0' already exists in 'hsr'
[ 1865.630019][ T4059] Cannot create hsr debugfs directory
[ 1877.409489][ T4063] hsr_slave_0: entered promiscuous mode
[ 1877.540248][ T4063] hsr_slave_1: entered promiscuous mode
[ 1877.660126][ T4063] debugfs: 'hsr0' already exists in 'hsr'
[ 1877.726955][ T4063] Cannot create hsr debugfs directory
[ 1884.666627][ T4059] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1885.422348][ T2131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1885.652690][ T4059] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1885.993178][ T2131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1886.476453][ T4059] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1886.831457][ T2131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.408747][ T4059] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1887.811935][ T2131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1901.041424][ T2131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1901.221377][ T2131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1901.358492][ T2131] bond0 (unregistering): Released all slaves
[ 1903.437150][ T2131] hsr_slave_0: left promiscuous mode
[ 1903.535981][ T2131] hsr_slave_1: left promiscuous mode
[ 1904.328757][ T2131] veth1_macvtap: left promiscuous mode
[ 1904.358038][ T2131] veth0_macvtap: left promiscuous mode
[ 1904.378041][ T2131] veth1_vlan: left promiscuous mode
[ 1904.431347][ T2131] veth0_vlan: left promiscuous mode
[ 1923.048656][ T4063] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1923.433229][ T4063] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1923.972026][ T4063] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1924.359158][ T4063] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1929.039776][ T2131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1930.518036][ T2131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.521978][ T2131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.647230][ T2131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1947.233088][ T2131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1947.343209][ T2131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1947.417135][ T2131] bond0 (unregistering): Released all slaves
[ 1948.887810][ T2131] hsr_slave_0: left promiscuous mode
[ 1948.951297][ T2131] hsr_slave_1: left promiscuous mode
[ 1949.360154][ T2131] veth1_macvtap: left promiscuous mode
[ 1949.368404][ T2131] veth0_macvtap: left promiscuous mode
[ 1949.372477][ T2131] veth1_vlan: left promiscuous mode
[ 1949.408535][ T2131] veth0_vlan: left promiscuous mode
[ 1962.969349][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1969.898887][ T4063] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2047.912844][ T4059] veth0_vlan: entered promiscuous mode
[ 2048.847390][ T4059] veth1_vlan: entered promiscuous mode
[ 2051.638549][ T4059] veth0_macvtap: entered promiscuous mode
[ 2052.448558][ T4059] veth1_macvtap: entered promiscuous mode
[ 2054.372961][ T4063] veth0_vlan: entered promiscuous mode
[ 2055.612765][ T4063] veth1_vlan: entered promiscuous mode
[ 2056.643943][ T2131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.651351][ T2131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.776638][ T2131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2056.783626][ T2131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2059.758766][   T25] audit: type=1400 audit(2058.930:111): avc:  denied  { mounton } for  pid=4059 comm="syz-executor" path="/syzkaller.UqPdHM/syz-tmp" dev="vda" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 2060.198450][ T4063] veth0_macvtap: entered promiscuous mode
[ 2060.629051][ T4063] veth1_macvtap: entered promiscuous mode
[ 2063.716999][   T21] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.721285][   T21] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.810059][ T3966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.814231][ T3966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2216.252114][   T21] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2218.120982][   T21] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2219.860766][   T21] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2221.603597][   T21] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2245.822870][   T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2246.093905][   T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2246.222075][   T21] bond0 (unregistering): Released all slaves
[ 2247.390279][   T21] hsr_slave_0: left promiscuous mode
[ 2247.467918][   T21] hsr_slave_1: left promiscuous mode
[ 2247.870959][   T21] veth1_macvtap: left promiscuous mode
[ 2247.895937][   T21] veth0_macvtap: left promiscuous mode
[ 2247.900262][   T21] veth1_vlan: left promiscuous mode
[ 2247.937252][   T21] veth0_vlan: left promiscuous mode
[ 2265.038628][   T21] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2267.628110][   T21] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2269.391426][   T21] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2271.151497][   T21] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.669772][   T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2291.817803][   T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2291.927899][   T21] bond0 (unregistering): Released all slaves
[ 2293.489044][   T21] hsr_slave_0: left promiscuous mode
[ 2293.565250][   T21] hsr_slave_1: left promiscuous mode
[ 2294.251447][   T21] veth1_macvtap: left promiscuous mode
[ 2294.286213][   T21] veth0_macvtap: left promiscuous mode
[ 2294.308669][   T21] veth1_vlan: left promiscuous mode
[ 2294.338078][   T21] veth0_vlan: left promiscuous mode
[ 2309.028330][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2309.598454][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2321.558273][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2321.848542][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2331.963700][ T4314] hsr_slave_0: entered promiscuous mode
[ 2332.057097][ T4314] hsr_slave_1: entered promiscuous mode
[ 2350.415781][ T4326] hsr_slave_0: entered promiscuous mode
[ 2350.491421][ T4326] hsr_slave_1: entered promiscuous mode
[ 2350.587194][ T4326] debugfs: 'hsr0' already exists in 'hsr'
[ 2350.591208][ T4326] Cannot create hsr debugfs directory
[ 2350.620416][ T4314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2351.096309][ T4314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2351.780172][ T4314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2352.007841][ T4314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2365.610901][ T4326] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2365.970303][ T4326] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2366.327148][ T4326] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2366.643462][ T4326] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2375.552248][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2391.700257][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2492.843858][ T4314] veth0_vlan: entered promiscuous mode
[ 2493.707265][ T4314] veth1_vlan: entered promiscuous mode
[ 2496.623120][ T4314] veth0_macvtap: entered promiscuous mode
[ 2497.163342][ T4314] veth1_macvtap: entered promiscuous mode
[ 2500.507777][ T4066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2500.547281][ T4066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2500.563864][ T4066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2500.590975][ T4066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2512.191095][ T4326] veth0_vlan: entered promiscuous mode
[ 2513.552083][ T4326] veth1_vlan: entered promiscuous mode
[ 2517.477228][ T4326] veth0_macvtap: entered promiscuous mode
[ 2518.219242][ T4326] veth1_macvtap: entered promiscuous mode
[ 2522.496365][ T4137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.546572][ T4137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.547895][ T4137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.548699][ T4137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2660.752619][   T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2663.576780][   T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2666.137083][   T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2668.458926][   T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2698.113637][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2698.681103][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2699.128475][   T43] bond0 (unregistering): Released all slaves
[ 2702.268838][   T43] hsr_slave_0: left promiscuous mode
[ 2702.438636][   T43] hsr_slave_1: left promiscuous mode
[ 2703.486638][   T43] veth1_macvtap: left promiscuous mode
[ 2703.489442][   T43] veth0_macvtap: left promiscuous mode
[ 2703.497642][   T43] veth1_vlan: left promiscuous mode
[ 2703.499254][   T43] veth0_vlan: left promiscuous mode
[ 2802.462753][ T4638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2802.823350][ T4638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2845.060372][ T4638] hsr_slave_0: entered promiscuous mode
[ 2845.150616][ T4638] hsr_slave_1: entered promiscuous mode
[ 2845.237000][ T4638] debugfs: 'hsr0' already exists in 'hsr'
[ 2845.240100][ T4638] Cannot create hsr debugfs directory
[ 2864.757659][ T4638] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2865.263502][ T4638] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2865.620340][ T4638] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2866.136411][ T4638] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2904.030565][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3068.551377][ T4638] veth0_vlan: entered promiscuous mode
[ 3069.882429][ T4638] veth1_vlan: entered promiscuous mode
[ 3075.079858][ T4638] veth0_macvtap: entered promiscuous mode
[ 3076.027072][ T4638] veth1_macvtap: entered promiscuous mode
[ 3080.769266][   T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.773007][   T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.849535][ T4066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3080.889108][ T4066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3300.891686][ T4847] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3303.263971][ T4847] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3307.008574][ T4847] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3308.959457][ T4847] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3334.042832][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3334.412492][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3334.868729][ T4847] bond0 (unregistering): Released all slaves
[ 3338.106886][ T4847] hsr_slave_0: left promiscuous mode
[ 3338.239437][ T4847] hsr_slave_1: left promiscuous mode
[ 3338.986502][ T4847] veth1_macvtap: left promiscuous mode
[ 3339.009265][ T4847] veth0_macvtap: left promiscuous mode
[ 3339.047453][ T4847] veth1_vlan: left promiscuous mode
[ 3339.062841][ T4847] veth0_vlan: left promiscuous mode
[ 3370.659577][ T4847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3372.659732][ T4847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3374.273426][ T4847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3375.939954][ T4847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3396.059208][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3396.257392][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3396.441398][ T4847] bond0 (unregistering): Released all slaves
[ 3398.665556][ T4847] hsr_slave_0: left promiscuous mode
[ 3398.777393][ T4847] hsr_slave_1: left promiscuous mode
[ 3399.485820][ T4847] veth1_macvtap: left promiscuous mode
[ 3399.507349][ T4847] veth0_macvtap: left promiscuous mode
[ 3399.513281][ T4847] veth1_vlan: left promiscuous mode
[ 3399.537699][ T4847] veth0_vlan: left promiscuous mode
[ 3457.501355][ T5005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3457.770877][ T5005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3461.730279][ T5011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3462.071483][ T5011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3490.692763][ T5005] hsr_slave_0: entered promiscuous mode
[ 3490.842121][ T5005] hsr_slave_1: entered promiscuous mode
[ 3496.285762][ T5011] hsr_slave_0: entered promiscuous mode
[ 3496.389461][ T5011] hsr_slave_1: entered promiscuous mode
[ 3496.466379][ T5011] debugfs: 'hsr0' already exists in 'hsr'
[ 3496.468135][ T5011] Cannot create hsr debugfs directory
[ 3514.317704][ T5005] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 3515.068887][ T5005] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 3515.744004][ T5005] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 3517.268056][ T5005] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 3522.055836][ T5011] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3522.669566][ T5011] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3523.128763][ T5011] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3523.661871][ T5011] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3556.892481][ T5005] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3562.233077][ T5011] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3718.970429][ T5005] veth0_vlan: entered promiscuous mode
[ 3720.441072][ T5005] veth1_vlan: entered promiscuous mode
[ 3725.281017][ T5011] veth0_vlan: entered promiscuous mode
[ 3727.040050][ T5005] veth0_macvtap: entered promiscuous mode
[ 3728.007756][ T5011] veth1_vlan: entered promiscuous mode
[ 3728.539537][ T5005] veth1_macvtap: entered promiscuous mode
[ 3735.897665][ T4556] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3735.899155][ T4556] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3735.911595][ T4556] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3735.928714][ T4556] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3736.271593][ T5011] veth0_macvtap: entered promiscuous mode
[ 3737.812393][ T5011] veth1_macvtap: entered promiscuous mode
[ 3745.777859][ T4169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3745.978186][ T3749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3746.008785][ T4066] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3746.078183][ T4140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4426.269450][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4426.979804][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4466.349706][ T5550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4467.083421][ T5550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4482.983307][ T5535] hsr_slave_0: entered promiscuous mode
[ 4483.064044][ T5535] hsr_slave_1: entered promiscuous mode
[ 4483.261066][ T5535] debugfs: 'hsr0' already exists in 'hsr'
[ 4483.331622][ T5535] Cannot create hsr debugfs directory
[ 4517.278504][ T5535] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 4518.043527][ T5535] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 4518.777212][ T5535] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 4519.537433][ T5535] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 4528.183672][ T5550] hsr_slave_0: entered promiscuous mode
[ 4528.420841][ T5550] hsr_slave_1: entered promiscuous mode
[ 4528.568273][ T5550] debugfs: 'hsr0' already exists in 'hsr'
[ 4528.597922][ T5550] Cannot create hsr debugfs directory
[ 4587.128024][ T5550] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 4587.879521][ T5550] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 4588.796379][ T5550] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 4590.083250][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4590.340768][ T5550] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 4651.221394][ T5550] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4713.618569][   T27] INFO: task syz.8.290:5522 blocked for more than 430 seconds.
[ 4713.665952][   T27]       Not tainted syzkaller #0
[ 4713.707869][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4713.708621][   T27] task:syz.8.290       state:D stack:0     pid:5522  tgid:5522  ppid:5011   task_flags:0x400040 flags:0x00000019
[ 4713.710099][   T27] Call trace:
[ 4713.710603][   T27]  __switch_to+0x584/0xb20 (T)
[ 4713.712616][   T27]  __schedule+0x1eec/0x33a4
[ 4713.713156][   T27]  schedule+0xac/0x27c
[ 4713.713589][   T27]  schedule_timeout+0x5c/0x1e4
[ 4713.714090][   T27]  do_wait_for_common+0x28c/0x444
[ 4713.816635][   T27]  wait_for_completion+0x44/0x5c
[ 4713.817572][   T27]  __synchronize_srcu+0x2a4/0x320
[ 4713.818148][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 4713.818680][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 4713.819147][   T27]  kvm_put_kvm+0x698/0xbe8
[ 4713.819541][   T27]  kvm_vm_release+0x58/0x78
[ 4713.820018][   T27]  __fput+0x4ac/0x980
[ 4713.820460][   T27]  ____fput+0x20/0x58
[ 4713.820927][   T27]  task_work_run+0x1bc/0x254
[ 4713.821338][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 4713.821774][   T27]  el0_svc+0x170/0x234
[ 4713.822278][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 4713.822784][   T27]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 4714.018005][   T27] 
[ 4714.018005][   T27] Showing all locks held in the system:
[ 4714.045866][   T27] 1 lock held by khungtaskd/27:
[ 4714.046575][   T27]  #0: ffff800087957348 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 4714.049022][   T27] 2 locks held by kworker/u4:3/43:
[ 4714.049380][   T27]  #0: 88f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4714.051040][   T27]  #1: ffff80008cb77c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4714.052716][   T27] 3 locks held by kworker/u4:6/2131:
[ 4714.053066][   T27] 2 locks held by getty/3196:
[ 4714.053357][   T27]  #0: 73f00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 4714.229277][   T27]  #1: 70ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 4714.231107][   T27] 2 locks held by syz-executor/3333:
[ 4714.231452][   T27] 2 locks held by kworker/u4:0/3749:
[ 4714.231763][   T27]  #0: 88f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 4714.233298][   T27]  #1: ffff8000a8fc7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 4714.505293][   T27] 3 locks held by kworker/u4:9/4140:
[ 4714.505798][   T27] 3 locks held by kworker/u4:12/4556:
[ 4714.506162][   T27] 3 locks held by kworker/u4:5/5007:
[ 4714.506502][   T27] 3 locks held by kworker/u4:14/5036:
[ 4714.506890][   T27] 2 locks held by syz.7.289/5506:
[ 4714.507230][   T27] 3 locks held by kworker/u4:11/5571:
[ 4714.507558][   T27] 1 lock held by modprobe/5714:
[ 4714.507879][   T27] 1 lock held by modprobe/5715:
[ 4714.508167][   T27] 1 lock held by dhcpcd-run-hook/5716:
[ 4714.508666][   T27] 
[ 4714.508941][   T27] =============================================
[ 4714.508941][   T27] 
[ 4734.747057][   T27] INFO: task syz.8.290:5522 blocked for more than 451 seconds.
[ 4734.751527][   T27]       Not tainted syzkaller #0
[ 4734.766162][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4734.766762][   T27] task:syz.8.290       state:D stack:0     pid:5522  tgid:5522  ppid:5011   task_flags:0x400040 flags:0x00000019
[ 4734.767517][   T27] Call trace:
[ 4734.767796][   T27]  __switch_to+0x584/0xb20 (T)
[ 4734.768302][   T27]  __schedule+0x1eec/0x33a4
[ 4734.768745][   T27]  schedule+0xac/0x27c
[ 4734.769185][   T27]  schedule_timeout+0x5c/0x1e4
[ 4734.769667][   T27]  do_wait_for_common+0x28c/0x444
[ 4734.770118][   T27]  wait_for_completion+0x44/0x5c
[ 4734.770597][   T27]  __synchronize_srcu+0x2a4/0x320
[ 4734.771105][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 4734.771557][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 4734.772009][   T27]  kvm_put_kvm+0x698/0xbe8
[ 4734.772392][   T27]  kvm_vm_release+0x58/0x78
[ 4734.772838][   T27]  __fput+0x4ac/0x980
[ 4734.773283][   T27]  ____fput+0x20/0x58
[ 4734.773733][   T27]  task_work_run+0x1bc/0x254
[ 4734.774168][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 4734.925775][   T27]  el0_svc+0x170/0x234
[ 4734.926470][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 4734.927006][   T27]  el0t_64_sync+0x198/0x19c
[ 4734.927643][   T27] 
[ 4734.927643][   T27] Showing all locks held in the system:
[ 4734.927962][   T27] 3 locks held by kworker/u4:1/21:
[ 4734.928290][   T27] 1 lock held by khungtaskd/27:
[ 4734.928569][   T27]  #0: ffff800087957348 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 4734.930358][   T27] 3 locks held by kworker/u4:6/2131:
[ 4734.930732][   T27] 2 locks held by getty/3196:
[ 4734.931051][   T27]  #0: 73f00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 4734.932685][   T27]  #1: 70ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 4735.068359][   T27] 3 locks held by kworker/u4:0/3749:
[ 4735.078829][   T27] 3 locks held by kworker/u4:4/4066:
[ 4735.105497][   T27] 3 locks held by kworker/u4:8/4137:
[ 4735.106256][   T27] 3 locks held by kworker/u4:2/4847:
[ 4735.106726][   T27] 2 locks held by syz.7.289/5506:
[ 4735.107078][   T27] 1 lock held by syz-executor/5550:
[ 4735.107408][   T27] 3 locks held by kworker/u4:15/5673:
[ 4735.107718][   T27] 1 lock held by rm/5720:
[ 4735.108083][   T27] 
[ 4735.108308][   T27] =============================================
[ 4735.108308][   T27]