last executing test programs:

1h54m33.412066004s ago: executing program 0 (id=36):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x480101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x1, 0xa}}], 0x30}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1d)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="1d908e33738d0f54719685483b90c2785b9baee1190ec33c5dd54d3a68874d964b2adf872bc3509fe5e0f205275cc32bc77cdb798f713b686ec427b525d9f3233f0792d08ecdc65c", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x60871, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h54m26.935985254s ago: executing program 0 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x89801, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x20)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x4})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000240)={0x1, [0x7]})
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0)
r12 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x4, 0x3, 0x0})
r13 = syz_kvm_vgic_v3_setup(r10, 0x4, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0xfff, &(0x7f0000000000)=0x2})

1h54m10.222231536s ago: executing program 0 (id=40):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x602000000011000b, &(0x7f0000000080)=0x5})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r2, 0x100000d, 0x9032, r1, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

1h54m5.56209438s ago: executing program 0 (id=42):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000600)=[@code={0xa, 0x54, {"0068a0380014007f00b8a12e008008d5007008d5a0188cd20000b0f2210180d2020180d2e30180d2040180d2020000d41820201e0040621e008020c80024002f"}}, @code={0xa, 0x6c, {"007008d580ec98d20000b8f2a10080d2820180d2e30180d2040180d2020000d4000020c8008008d5000008d5000440fc000008d5202384d20080b0f2210180d2a20180d2830180d2040180d2020000d43f2003d50000002c"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x161}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x244}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x4, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c008}}, @hvc={0x32, 0x40, {0x30000000, [0x11, 0x2, 0x7fffffffffffffff, 0x7fff, 0x6]}}, @msr={0x14, 0x20, {0x603000000013e65a, 0x5}}, @code={0xa, 0x84, {"20f68fd20060b0f2610180d2620180d2c30180d2c40180d2020000d4007008d5000028d50098a12e008008d5000008d540439cd20040b8f2c10080d2c20180d2c30080d2c40180d2020000d420ee88d20060b0f2610080d2420080d2030080d2840180d2020000d4007008d500a4000f"}}, @svc={0x122, 0x40, {0x400, [0x0, 0x47c4f524, 0x1, 0x42]}}, @code={0xa, 0x6c, {"0010c0da003189d200a0b8f2010180d2c20180d2030180d2440080d2020000d4003c004e000820b800a4200d007008d500e280d200e0b0f2010180d2820080d2030080d2840180d2020000d4007008d5007008d500080038"}}, @uexit={0x0, 0x18, 0x80000000}, @code={0xa, 0x54, {"a08788d20000b8f2610080d2e20080d2e30080d2440080d2020000d4008c006f00c0611e00ac200e0068601e0050005e000840b80000431e007008d5007008d5"}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x318}}, @msr={0x14, 0x20, {0x603000000013de91, 0x6178}}, @svc={0x122, 0x40, {0xc5000021, [0xff, 0xfffffffffffff05d, 0x1, 0x1, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x13b}}], 0x424}, &(0x7f0000000180)=[@featur1={0x1, 0xb4}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r3, 0x541b, 0x2004001f)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c021, &(0x7f0000000140)=0x9})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x7})
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x7fffffffffffffff})
r12 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013c020, &(0x7f0000000000)=0xbb})

1h53m21.352333249s ago: executing program 32 (id=41):
openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0)
syz_kvm_setup_cpu$arm64(r3, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010000a, &(0x7f00000000c0)=0x80003fe})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000000)) (async)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3c) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3c)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000240)=@arm64_fp={0x60400000001000c8, &(0x7f0000000040)=0x8}) (async)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000240)=@arm64_fp={0x60400000001000c8, &(0x7f0000000040)=0x8})
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x6)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x1, 0x7fffffffffffffff, &(0x7f00000001c0)=0x5})
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000140)={0x0, &(0x7f0000000300)=[@irq_setup={0x46, 0x18, {0x1, 0x2c0}}, @irq_setup={0x46, 0x18, {0x3, 0x38b}}, @smc={0x1e, 0x40, {0x84000053, [0x40, 0x6, 0x9, 0x7, 0x8]}}, @msr={0x14, 0x20, {0x6030000000138046, 0x6}}, @code={0xa, 0x9c, {"0024005f0020ff0d007008d500fca00e007008d50040641ec0258fd200c0b0f2010080d2820080d2030080d2840180d2020000d4400f9ad200c0b8f2010180d2020080d2030180d2e40180d2020000d4803592d20040b0f2410080d2420080d2c30080d2640180d2020000d460989cd20020b8f2410180d2e20180d2230080d2040080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0xe, 0x5, 0x3a74, 0x1}}, @eret={0xe6, 0x18, 0x10}, @memwrite={0x6e, 0x30, @generic={0x1000, 0xf7, 0x3dfb, 0xa}}, @irq_setup={0x46, 0x18, {0x4, 0x101}}, @svc={0x122, 0x40, {0x84000005, [0x4, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x6]}}, @smc={0x1e, 0x40, {0xffbf, [0xe5, 0x8a6, 0x5, 0x9, 0xb]}}, @code={0xa, 0xb4, {"e0fa98d200e0b8f2810080d2020080d2a30080d2a40080d2020000d4007008d5c07896d20040b0f2410080d2c20080d2630180d2c40180d2020000d400a0006f202c9dd200e0b8f2410180d2020180d2e30080d2a40180d2020000d4a06588d200e0b0f2610180d2e20180d2a30180d2c40080d2020000d440f79bd200e0b8f2e10080d2420180d2830080d2640080d2020000d4000008d500c8210e0000c078"}}, @irq_setup={0x46, 0x18, {0x3, 0xb2}}, @irq_setup={0x46, 0x18, {0x1, 0x1b6}}, @smc={0x1e, 0x40, {0x84000001, [0x6, 0x1, 0x1, 0x3, 0xd3]}}, @irq_setup={0x46, 0x18, {0x0, 0x8e}}, @msr={0x14, 0x20, {0x603000000013e10a, 0xffffffff80000001}}, @svc={0x122, 0x40, {0x84000005, [0x2, 0x0, 0x3, 0x7, 0xe76d]}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0xc14, 0xe4b, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x2, 0x5, 0x6}}, @smc={0x1e, 0x40, {0xc1001113, [0x3800000000, 0x0, 0x0, 0x7, 0x7ff]}}, @irq_setup={0x46, 0x18, {0x3, 0x2f5}}, @msr={0x14, 0x20, {0x603000000013c210, 0x1}}, @svc={0x122, 0x40, {0x80, [0x7fffffffffffffff, 0x7ff, 0x0, 0x6, 0x602]}}], 0x4e0}, &(0x7f0000000280)=[@featur2={0x1, 0x86}], 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)

1h53m18.304167349s ago: executing program 33 (id=42):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000600)=[@code={0xa, 0x54, {"0068a0380014007f00b8a12e008008d5007008d5a0188cd20000b0f2210180d2020180d2e30180d2040180d2020000d41820201e0040621e008020c80024002f"}}, @code={0xa, 0x6c, {"007008d580ec98d20000b8f2a10080d2820180d2e30180d2040180d2020000d4000020c8008008d5000008d5000440fc000008d5202384d20080b0f2210180d2a20180d2830180d2040180d2020000d43f2003d50000002c"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x161}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x244}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x4, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c008}}, @hvc={0x32, 0x40, {0x30000000, [0x11, 0x2, 0x7fffffffffffffff, 0x7fff, 0x6]}}, @msr={0x14, 0x20, {0x603000000013e65a, 0x5}}, @code={0xa, 0x84, {"20f68fd20060b0f2610180d2620180d2c30180d2c40180d2020000d4007008d5000028d50098a12e008008d5000008d540439cd20040b8f2c10080d2c20180d2c30080d2c40180d2020000d420ee88d20060b0f2610080d2420080d2030080d2840180d2020000d4007008d500a4000f"}}, @svc={0x122, 0x40, {0x400, [0x0, 0x47c4f524, 0x1, 0x42]}}, @code={0xa, 0x6c, {"0010c0da003189d200a0b8f2010180d2c20180d2030180d2440080d2020000d4003c004e000820b800a4200d007008d500e280d200e0b0f2010180d2820080d2030080d2840180d2020000d4007008d5007008d500080038"}}, @uexit={0x0, 0x18, 0x80000000}, @code={0xa, 0x54, {"a08788d20000b8f2610080d2e20080d2e30080d2440080d2020000d4008c006f00c0611e00ac200e0068601e0050005e000840b80000431e007008d5007008d5"}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x318}}, @msr={0x14, 0x20, {0x603000000013de91, 0x6178}}, @svc={0x122, 0x40, {0xc5000021, [0xff, 0xfffffffffffff05d, 0x1, 0x1, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x13b}}], 0x424}, &(0x7f0000000180)=[@featur1={0x1, 0xb4}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r3, 0x541b, 0x2004001f)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c021, &(0x7f0000000140)=0x9})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000000c0)={0x7})
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x7fffffffffffffff})
r12 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000001c0)=@arm64_sys={0x603000000013c020, &(0x7f0000000000)=0xbb})

1h47m39.589049031s ago: executing program 34 (id=45):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
syz_kvm_vgic_v3_setup(r2, 0x5, 0x1c0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x11})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x3550, 0x3}}], 0x58}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r14, r15, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="be00000000000000180000000000000001c8"], 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

1h44m33.678638868s ago: executing program 3 (id=64):
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r0, 0xe, 0x13, r1, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2280, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d)
ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013804d, &(0x7f0000000040)=0x2}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x8000, &(0x7f00000000c0)=0x7})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, &(0x7f0000000140)={[0xfffffffffffffff7, 0x0, 0x8, 0x8000, 0x2, 0xff, 0x6, 0x6, 0x1000, 0x9, 0x7, 0x4, 0x7d30, 0x7, 0x6, 0x6], 0x4000, 0x2110})
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000880)={0x0, &(0x7f0000000200)=[@msr={0x14, 0x20, {0x603000000013805f, 0x7ff}}, @mrs={0xbe, 0x18, {0x603000000013e642}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x17a}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x40, 0x770, 0x8}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x35d}}, @code={0xa, 0x9c, {"a0ff98d20020b8f2010080d2220080d2230080d2040080d2020000d4a02098d20080b0f2410080d2e20080d2830080d2040180d2020000d4003c202ec00982d20040b0f2e10080d2220080d2a30180d2e40180d2020000d4000008d5008008d50080c0c800c0211ea0c999d20020b8f2210080d2a20080d2830180d2240080d2020000d400c8217e"}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x105}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0x825, 0x8, 0x2}}, @eret={0xe6, 0x18, 0x240000000000000}, @svc={0x122, 0x40, {0x32000000, [0x1ff, 0x2, 0x7, 0x8, 0x81]}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0xffffffffffff5f54, 0x1, 0x3ca, 0x80]}}, @hvc={0x32, 0x40, {0x84000012, [0x4, 0x8, 0x3, 0x10, 0x8000000000000000]}}, @eret={0xe6, 0x18, 0xa8}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xa, 0x8, 0x2, 0x2}}, @smc={0x1e, 0x40, {0x8400000a, [0xffff, 0x80000000, 0x1, 0xfffffffffffffffb, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013c091}}, @svc={0x122, 0x40, {0x3000000, [0x7, 0x28e, 0xccb8, 0x8000000000000001, 0x1c00000]}}, @irq_setup={0x46, 0x18, {0x4, 0x244}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x8, 0x8000000000000001, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013c012}}, @code={0xa, 0xcc, {"e03081d20000b8f2410080d2a20080d2630080d2240180d2020000d40084a00de06999d20080b0f2a10180d2620180d2830080d2840180d2020000d4c0bc98d20060b0f2610180d2a20080d2030180d2e40080d2020000d4201f9fd200a0b0f2210180d2420080d2830080d2040180d2020000d4a04d97d200e0b0f2a10180d2020180d2030080d2c40180d2020000d40054205e000028d50000c0ade03793d20060b0f2410180d2a20180d2c30180d2a40080d2020000d4"}}, @svc={0x122, 0x40, {0xc4000011, [0xfffffffffffffff2, 0x81, 0x200, 0x5, 0x2]}}, @irq_setup={0x46, 0x18, {0x0, 0x2c2}}, @code={0xa, 0xb4, {"e0919cd20080b8f2e10080d2020080d2a30080d2640180d2020000d4600580d20000b8f2010180d2220080d2c30180d2a40180d2020000d400f8b02e000028d50000659e80719bd20060b8f2e10180d2a20080d2e30080d2240180d2020000d40000199e803791d20060b8f2c10180d2220180d2030180d2a40180d2020000d4407c97d20020b8f2e10180d2020080d2230080d2e40080d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x603000000013f102, 0x4}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013806e, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x204}}, @mrs={0xbe, 0x18, {0x5eda}}, @eret={0xe6, 0x18, 0x81}, @its_setup={0x82, 0x28, {0x4, 0x1, 0xfa}}], 0x66c}, &(0x7f00000008c0)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000900)=0x8) (async)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000940)={0x1, 0x2}) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000bfe000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000c00)={0x0, &(0x7f0000000980)=[@uexit={0x0, 0x18, 0x1000000000000}, @code={0xa, 0xcc, {"401096d20040b0f2410180d2c20080d2a30080d2240180d2020000d4607f89d20040b8f2e10080d2820080d2e30080d2240180d2020000d4a0369cd20080b8f2a10080d2820080d2a30080d2a40180d2020000d40068603800088078c0ac97d20000b0f2210080d2020180d2c30180d2440080d2020000d4a00e8cd20020b8f2610180d2a20180d2030180d2c40080d2020000d4007008d560a592d200c0b0f2a10180d2a20180d2a30080d2640080d2020000d4007008d5"}}, @uexit={0x0, 0x18, 0x9}, @smc={0x1e, 0x40, {0xc4000011, [0x4, 0x1, 0x0, 0x200]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x1, 0x2}}, @irq_setup={0x46, 0x18, {0x8, 0x39d}}, @hvc={0x32, 0x40, {0x8400000a, [0x5, 0x2, 0x4, 0x7fffffffffffffff, 0x8000000000000001]}}, @svc={0x122, 0x40, {0xc5000020, [0x10, 0x4, 0x400, 0x6, 0x1]}}, @irq_setup={0x46, 0x18, {0x3, 0x77}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x10, 0xfffffffffffffff9, 0x3}}], 0x24c}, &(0x7f0000000c40)=[@featur2={0x1, 0xb9}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000c80)="6a471427231f87fcdda67dddfd170ee0241b712b9bd3f03ab01f620711962a8eb6df123e0de2713e5f25163728679bbc78c1fcfd25621dc1db485f58558ae2ce46fe3afacbb94380", 0x0, 0x48)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11)
r9 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000d40)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000d00)=0x5}) (async)
r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000d80)={0x3, 0x5, 0xdddd1000, 0x1000, &(0x7f0000d5e000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x39)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000dc0)={0xd}) (async)
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = eventfd2(0x2, 0x80001)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000e00)={0xb, 0x4001, 0x1, r13, 0x4})
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000e80)=@arm64_fw={0x6030000000140002, &(0x7f0000000e40)=0x1}) (async)
r14 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000013c0)={0x0, &(0x7f0000000ec0)=[@its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x7, 0x5, 0x10, 0x1}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x35b}}, @eret={0xe6, 0x18, 0x4}, @code={0xa, 0x54, {"000030d5000028d50050005e0034000f0054202e00fc205e80f58ed200a0b8f2e10180d2e20080d2230080d2240080d2020000d4000000f900b8a10e0080a09b"}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x4c}}, @svc={0x122, 0x40, {0x1, [0x1f, 0x80, 0x100000001, 0xe, 0x7]}}, @irq_setup={0x46, 0x18, {0x1, 0x359}}, @svc={0x122, 0x40, {0xc4000001, [0x40, 0x6, 0x2, 0xffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013de94}}, @code={0xa, 0x84, {"007008d5007008d580539fd200c0b0f2610080d2220080d2a30080d2640180d2020000d4e0179ad200a0b0f2010080d2a20180d2230080d2e40180d2020000d4007008d5000000280060000c0010202e00a09f0c005482d200e0b0f2a10080d2e20080d2030080d2840180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1200, 0xf, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x2, 0x4, 0xd, 0x2}}, @code={0xa, 0x9c, {"00a093d20060b8f2210180d2020180d2430080d2040180d2020000d4c0578fd20000b8f2a10080d2820080d2830180d2440080d2020000d40094202e60e299d20080b8f2210080d2620180d2630180d2a40180d2020000d4000400bc60339dd20080b0f2610080d2220180d2830180d2040180d2020000d400fc000f00d4a02e007008d500000014"}}, @irq_setup={0x46, 0x18, {0x0, 0x1c5}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x1, 0xe, 0x8, 0x8, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x41}}, @svc={0x122, 0x40, {0x4, [0xa593151, 0x0, 0x1000000000000, 0xff]}}, @smc={0x1e, 0x40, {0xc4000007, [0x2, 0x2a6d, 0x7, 0xc, 0x1]}}, @irq_setup={0x46, 0x18, {0x1, 0x1a}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x370}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0x9, 0x20d, 0xd8a, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x300, 0x12, 0x2}}, @svc={0x122, 0x40, {0xc4000004, [0x6, 0x9, 0x0, 0x100000000, 0xc29b1fe]}}], 0x4e4}, &(0x7f0000001400)=[@featur2={0x1, 0x20}], 0x1)
ioctl$KVM_INTERRUPT(r14, 0x4004ae86, &(0x7f0000001440)=0x8)

1h44m25.287609078s ago: executing program 3 (id=65):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, <r4=>0xffffffffffffffff}) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x2a040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xd8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r9 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfd000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x401, 0x8}}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x2d0})
munmap(&(0x7f00000be000/0x1000)=nil, 0xffffffffdff41fff) (async, rerun: 64)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (rerun: 64)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x1, <r13=>0xffffffffffffffff})
r14 = ioctl$KVM_CREATE_VM(r13, 0x894c, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r14, 0x4030582a, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x4000000008})
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x8143}}], 0x18}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

1h44m8.430914424s ago: executing program 3 (id=66):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100010, 0xffffffffffffffff}) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r8, 0x4208ae9b, &(0x7f0000000240)={0x3, 0x0, {[0x729, 0x3, 0x7, 0xfffffffffffffffd, 0x4, 0xca, 0xc679, 0xff, 0x7fffffffffffffff, 0xd4b, 0xfffffffffffffffa, 0x6, 0x6, 0xc00000000000000, 0xffffffffffffffa8], [0x5000000000, 0x3, 0x7, 0x8, 0x7, 0x4, 0x1, 0x1, 0x100000001, 0x7ffffffc, 0x8001, 0x2, 0x1, 0x91f6, 0x0, 0x53], [0x80, 0xfffffffffffffff7, 0x7e, 0x0, 0x804e, 0x5f, 0x30000000000, 0x80, 0xe4, 0x7, 0x5, 0x80000001, 0x9, 0x35, 0x1, 0x1], [0x3, 0x6, 0x4, 0x2, 0x3, 0x100000000, 0x38000000, 0x8001, 0x6304, 0x8, 0x6, 0x2, 0x8, 0xf15, 0x0, 0xf]}}) (async, rerun: 32)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0xd000})

1h43m57.215670212s ago: executing program 3 (id=67):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000240)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_assert_reg(r6, 0x603000000013dce8, 0x8000)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xd)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454d9, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x1, 0x3}})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x83)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1, 0x4000010, r0, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1h43m42.560851643s ago: executing program 3 (id=68):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r5, 0x8})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r5, 0x2})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r5, 0x6})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x4000000008})
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x5, 0x2, 0x3]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000000000002000000ff"])

1h43m26.909926538s ago: executing program 3 (id=69):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000003c0)=@attr_other={0x0, 0xe50, 0x0, &(0x7f0000000380)=0x6})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000040)={0x10000, 0x1, 0x4, 0x2000, &(0x7f0000d21000/0x2000)=nil, 0xf9e2})
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000240))
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x8, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305828, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x2, 0x0})
r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db})
r16 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r18 = syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r18, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r17, 0x1, 0x100)

1h42m37.150383751s ago: executing program 35 (id=69):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000003c0)=@attr_other={0x0, 0xe50, 0x0, &(0x7f0000000380)=0x6})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000040)={0x10000, 0x1, 0x4, 0x2000, &(0x7f0000d21000/0x2000)=nil, 0xf9e2})
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000240))
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x8, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305828, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x2, 0x0})
r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db})
r16 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r18 = syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r18, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r17, 0x1, 0x100)

1h37m12.119575342s ago: executing program 4 (id=84):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x3d9c03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_vgic_v3_setup(r5, 0x3, 0xa0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x9, 0x1, 0x0})
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160003, &(0x7f0000000000)=0x7})

1h36m59.651368443s ago: executing program 4 (id=85):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x4, 0x9})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000280)=0x4f627b94})
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x8})

1h36m42.875800192s ago: executing program 4 (id=86):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0xbfdd436d28f677a, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async)
close(r1)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xdddd1000, 0x2000, &(0x7f0000fa4000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
r12 = ioctl$KVM_CREATE_VM(r11, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0x8008b705, 0x0)
r13 = eventfd2(0xd, 0x1)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x10000, 0xeeee0000, 0x4, r13}) (async)
close(r13)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
write$eventfd(r13, 0x0, 0x500) (async)
r14 = eventfd2(0x0, 0x0)
close(r14)

1h36m30.835936687s ago: executing program 4 (id=87):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000240)=@arm64_bitmap={0x6030000000160002, &(0x7f00000000c0)=0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f00000002c0)={0x2, 0x4, 0x3000, 0x1000, &(0x7f0000d12000/0x1000)=nil, 0x8000})
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})

1h36m14.745571403s ago: executing program 4 (id=88):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = eventfd2(0x2, 0x800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x100000000, 0xeeee0000, 0x0, r3, 0xf})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000100)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000280)={0x1, 0x105000})
ioctl$KVM_GET_DEVICE_ATTR(r16, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x40000000000000, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8001, 0xd, &(0x7f0000000140)=0x1})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1})

1h35m55.109048889s ago: executing program 5 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x54e3, 0x110c230008)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

1h35m51.437219311s ago: executing program 4 (id=89):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x1, 0x300, &(0x7f0000000000)=0xd46})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x5})

1h35m5.030899941s ago: executing program 36 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x894c, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x0, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x54e3, 0x110c230008)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

1h35m0.4254367s ago: executing program 37 (id=89):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x1, 0x300, &(0x7f0000000000)=0xd46})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x5})

1h27m44.709041603s ago: executing program 7 (id=91):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x400500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160003, &(0x7f0000000000)=0x7})

1h27m33.828036209s ago: executing program 7 (id=93):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0xc018ae85, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a82616})
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r10, 0x4, 0x3a0) (async)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@memwrite={0x6e, 0x0, @vgic_gicr={0x80e0000, 0x280, 0x3ff, 0xf}}], 0xfff6}, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

1h27m8.079818712s ago: executing program 7 (id=95):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x400000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0xfffffffffffffffe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe6)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000df0000/0x2000)=nil, r10, 0x2, 0x4010, r7, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x99a, 0x7, 0x8, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1h26m50.822033117s ago: executing program 7 (id=97):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xf5)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x80000000})

1h26m32.265641994s ago: executing program 7 (id=99):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x3c6803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x3, 0x100000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x58)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000180)={r8, 0xff, 0x1, r8})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000140)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x313}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x48}, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x30)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x4, 0x9, 0x1}})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1h25m42.245074317s ago: executing program 38 (id=99):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x3c6803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x3, 0x100000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x58)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000180)={r8, 0xff, 0x1, r8})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000140)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x313}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x48}, &(0x7f0000000280)=[@featur2={0x1, 0x1}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x30)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x4, 0x9, 0x1}})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1h19m49.620089994s ago: executing program 6 (id=121):
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000040)={0x10000, 0x1, 0x4, 0x2000, &(0x7f0000d21000/0x2000)=nil, 0xf9e2})

1h19m37.165206612s ago: executing program 6 (id=122):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r9, 0x603000000013df01, 0x8000)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
ioctl$KVM_GET_SREGS(r12, 0x8000ae83, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f0000000000)=ANY=[@ANYRES32=r4])
r13 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce4, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x2, 0xd51})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0xc007000000000000)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ec8f11ffd60c000000020000000100000000000000bb0e00004c794c397f000000000800"/61])
close(r1)

1h19m6.240082697s ago: executing program 6 (id=123):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x274002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x2132, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000000)=@arm64)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c024}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h18m53.445506231s ago: executing program 6 (id=124):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xc0189436, 0x100000000000000)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0xffffffffffbffffc, 0x120)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x27)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xcb)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bc2000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000240)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0x80111500, 0x20000000)
write$eventfd(r16, &(0x7f0000000000), 0xfffffdef)
munmap(&(0x7f0000008000/0x1000)=nil, 0x200000)
syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x5, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}], 0x75}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1h18m26.877139279s ago: executing program 6 (id=125):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}}], 0x50}, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x400454cb, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f00000002c0)={0xa8, 0x0, 0x2})
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r10, 0x400454ce, 0x110c230008)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f0000000240)=[@svc={0x122, 0x40, {0x10, [0x6, 0xb, 0x2, 0x1, 0x8]}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8002}}, @msr={0x14, 0x20, {0x0, 0x10002}}], 0x80}, &(0x7f0000000000)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h17m55.748330351s ago: executing program 6 (id=126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100008, &(0x7f0000000000)=0xcb})
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0x4b47, 0xfffffffffffffffe)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000edf000/0x3000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000e72000/0x2000)=nil, r8, 0x0, 0x12, r4, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r12 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x5d)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x2000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})

1h17m8.478270341s ago: executing program 39 (id=126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
openat$kvm(0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@arm64_core={0x6030000000100008, &(0x7f0000000000)=0xcb})
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0x4b47, 0xfffffffffffffffe)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000edf000/0x3000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000e72000/0x2000)=nil, r8, 0x0, 0x12, r4, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2, 0x12, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r12 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x5d)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x2000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})

1h16m6.916154588s ago: executing program 8 (id=102):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000180)=@arm64_sys={0x603000000013c024, &(0x7f0000000100)=0xbec})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x25)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0)
r17 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r18 = openat$kvm(0x0, &(0x7f0000000040), 0x505080, 0x0)
r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r19, 0xae03, 0x52)

1h15m18.45763399s ago: executing program 40 (id=102):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000180)=@arm64_sys={0x603000000013c024, &(0x7f0000000100)=0xbec})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013c006}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x25)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0)
r17 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r18 = openat$kvm(0x0, &(0x7f0000000040), 0x505080, 0x0)
r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r19, 0xae03, 0x52)

29m50.537187407s ago: executing program 1 (id=230):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000dae000/0x4000)=nil, 0x0, 0x7000008, 0x48010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000cf7000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000051, [0x80000000000, 0x106, 0xf1, 0x6f6, 0x1]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000040)=@arm64_extra={0x603000000013c036, &(0x7f0000000100)=0x78b})
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)

29m23.426071502s ago: executing program 1 (id=231):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x2, 0x100)
close(r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000000000/0x400000)=nil)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
close(r5)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r9, 0x401054d5, 0x110c230020)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

28m53.198305169s ago: executing program 1 (id=232):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0xfffffffffffffbff}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r4 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xaa)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

28m31.185867436s ago: executing program 1 (id=233):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0x0, 0x80000)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x110, r5, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140001, 0x0})
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x2, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x10000, 0x0, 0x100, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x8001, 0x4}}], 0x28}, 0x0, 0x0)
r15 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000000)=0x3})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r17 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r18, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

28m3.987766976s ago: executing program 1 (id=234):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x1000008080000})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x8, 0x4, 0x0})

27m48.440592632s ago: executing program 1 (id=235):
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x2, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x400454ca, 0xd8ffffffffff0f00)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x9})
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x32)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r10, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, 0x0)

26m59.357755459s ago: executing program 41 (id=235):
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x5, 0x2, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x400454ca, 0xd8ffffffffff0f00)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r0, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x9})
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x32)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r10, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, 0x0)

17m27.179841846s ago: executing program 0 (id=236):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x7})
r3 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x10000})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x8})
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x6000})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
write$eventfd(r11, &(0x7f00000001c0), 0xe80)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c61000/0x3000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)

17m6.857870619s ago: executing program 0 (id=237):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3})
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x2d, 0x2, r3})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)

16m9.078223567s ago: executing program 42 (id=237):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r3})
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x2d, 0x2, r3})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)

3m14.915273354s ago: executing program 9 (id=257):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f00009b4000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f0000000240)=0x4})
syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000a80)={0x0, &(0x7f00000002c0)=[@irq_setup={0x46, 0x18, {0x3, 0x1e}}, @msr={0x14, 0x20, {0x603000000013deee, 0x2}}, @code={0xa, 0x6c, {"000028d5008008d5008008d5001c004e000008d50000df0de0b798d200a0b0f2410080d2820180d2e30180d2040080d2020000d4000020ea008008d5006090d20020b8f2010080d2e20180d2c30080d2440180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013de83}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x15f, 0x2, 0xc}}, @smc={0x1e, 0x40, {0x20, [0x1, 0x87, 0x8, 0xb4, 0xffffffff]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x4, 0xe, 0x9, 0x5, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x2, 0x4, 0xffffffff, 0x2}}, @uexit={0x0, 0x18, 0x8}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x2}, @msr={0x14, 0x20, {0x603000000013e300, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c4d1}}, @code={0xa, 0xb4, {"008008d5008008d5206885d200a0b0f2c10180d2220080d2630180d2840080d2020000d460ec81d200e0b0f2410080d2c20080d2630080d2e40080d2020000d400a192d200c0b8f2a10180d2020080d2630180d2040080d2020000d420668bd200c0b0f2810180d2c20180d2830180d2840180d2020000d4007008d5007008d5c0f289d20020b0f2410180d2420080d2630080d2c40080d2020000d4000008d5"}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x401}}, @hvc={0x32, 0x40, {0x86000000, [0x101, 0xaa, 0x5, 0x4, 0x18ea]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x1, 0x0, 0x5, 0x2a42, 0x2}}, @code={0xa, 0x99, {"0000402c0080b8f2010080d2220080d2630180d2c40080d2020000d440ee92d20040b8f2010080d2928b90d2a30180d2640180d2020000dc007008d500a0600d00b8205e602c8ad20080b8f2010080d2820080d2e30180d2840080d202000d00d4d48008d5007008d580e79fd20000b8f2210080d2420080d2630180d2040180d2020000d4"}}, @irq_setup={0x46, 0x18, {0x2, 0x135}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x3d7}}], 0x429}, &(0x7f0000000ac0)=[@featur1={0x1, 0x4a}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x21)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0xf000, 0x2000, &(0x7f000003d000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r12, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
r18 = syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil)
r19 = syz_kvm_add_vcpu$arm64(r18, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r19, 0x4010aeac, &(0x7f0000000040)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000000)=0x8})

2m44.650104127s ago: executing program 9 (id=259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f2d000/0x4000)=nil, r1, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
r9 = eventfd2(0xd, 0x1)
close(r9) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r9, 0x0, 0x500) (async)
r10 = eventfd2(0x0, 0x0)
close(r10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r10, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000008, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

2m36.447462216s ago: executing program 2 (id=260):
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x200)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000000)=0xb1b3})
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000080))
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000200)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f00000001c0)=0x1b})
ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x5)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x2, 0xffffffffffffffff, 0x1})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00000002c0)={0x9, 0x1a0c})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000300)={0xcb, 0x2, 0x1, r0, 0x2})
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x200, 0xfffffffffffffff7})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000380)={0x1ff, 0x1, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x1, r0})
ioctl$KVM_GET_REGS(r1, 0x8360ae81, &(0x7f0000000440))
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000540)=@arm64_sve={0x6080000000150122, &(0x7f0000000500)=0xfffffffffffffffa})
r4 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2, 0x1010, r1, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000580)="bf67bd4c51de8f6befee079f759ef643e90fc48fcca8df79c8a8db459785d7609539b50b3e2b87fddaa7fe15f3f168a87a4ef0da712f2802350060124287ab20c777aa8f37dff452", 0x0, 0x48)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000600)={0x3, 0x5c223897})
ioctl$KVM_ARM_PREFERRED_TARGET(r1, 0x8020aeaf, &(0x7f0000000640))
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000006c0)=@arm64_sys={0x603000000013e722, &(0x7f0000000680)=0x6})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4000ae84, &(0x7f0000000700)={{0x0, 0xeeef0000, 0xa, 0x0, 0xee, 0x0, 0x3, 0x7, 0x7, 0xf9, 0xb, 0x2}, {0xdddd1000, 0x0, 0x8, 0x8, 0xb, 0x4, 0x6, 0x4, 0x9, 0x21, 0x2a, 0x4}, {0x2, 0xeeee8000, 0xc, 0x6, 0x8, 0x3, 0x4, 0x6, 0x9, 0x6, 0x9, 0x6}, {0xf000, 0x3b338002, 0xa, 0x0, 0x4, 0xfa, 0x4, 0xa4, 0x5, 0x4c, 0xf, 0x2}, {0x80a0000, 0x0, 0x10, 0x8, 0x0, 0x2, 0xc3, 0x1, 0x6, 0x80, 0x62, 0x1}, {0x8080000, 0x8000000, 0x0, 0x40, 0x8, 0x4, 0x1, 0x7, 0x9, 0x1, 0x1, 0x2}, {0xf000, 0x4, 0xe, 0xc, 0x5, 0x7, 0x6, 0x4, 0x8, 0x6, 0x1}, {0x80a0000, 0x8080000, 0x9, 0x2, 0x1, 0x6, 0x6, 0x1, 0xd, 0x1, 0xe, 0x4}, {0x14000, 0xfff7}, {0x6000, 0x4}, 0x20, 0x0, 0xf000, 0x14460, 0x1, 0x7800, 0x8000000, [0x1d, 0x3, 0x8000000000000000, 0x8000000000000001]})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r5, 0x4010aeb5, &(0x7f0000000840)={0xffffffff, 0x3})
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000880)={0x3, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000008c0)={0x2, 0x4, 0x100000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x66a, r6})
ioctl$KVM_SET_REGS(r1, 0x4360ae82, &(0x7f0000000980)={[0x2, 0x0, 0x7, 0x3, 0x3, 0xa8fc, 0x3, 0xa, 0x5bf6, 0x5, 0xf8, 0x0, 0x8, 0x0, 0xbb, 0x8], 0x8080000, 0x81})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000a40)={0x6})
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)

2m21.45162257s ago: executing program 9 (id=261):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x800, 0x4})
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r2, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae03, 0xc3)
munmap(&(0x7f0000683000/0x1000)=nil, 0x1000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e22ffff)
r4 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000783000/0x4000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000eab000/0x1000)=nil, 0x1000)
syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0x40086602, 0x110e227ffe)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f0000000000)=ANY=[], 0x21c}], 0x1, 0x0, 0x0, 0xf2d4595da1e2a08c)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000100))
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

2m19.109577052s ago: executing program 2 (id=262):
ioctl$KVM_CAP_ARM_USER_IRQ(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000080))
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x9, 0x8000})
r2 = eventfd2(0x1, 0x1)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r2, 0x10000, 0x1, r0})
r3 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000005c0)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x800, [0x9, 0x1, 0x7, 0x5, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x2, 0x3, 0x5, 0x1}}, @code={0xa, 0x84, {"0088212e000008d5a09e99d20040b0f2810180d2620180d2430180d2040080d2020000d4007008d5e0ae98d20020b0f2210180d2e20080d2830180d2040080d2020000d4007008d50000c0790080201f0030005f608c9cd20060b0f2810180d2020180d2030180d2640180d2020000d4"}}, @code={0xa, 0x6c, {"007008d5000028d50060400d000040a8802885d200e0b8f2010080d2e20180d2e30080d2a40080d2020000d4a0e585d200a0b8f2010080d2820080d2230180d2e40180d2020000d4007008d50028201e000c007c000008d5"}}, @hvc={0x32, 0x40, {0x31000000, [0xffffffff, 0x6, 0x0, 0x10001, 0xcc3e]}}, @smc={0x1e, 0x40, {0x2000, [0x8, 0x0, 0x1, 0x0, 0xbb0a]}}, @mrs={0xbe, 0x18, {0x603000000013e720}}, @mrs={0xbe, 0x18, {0x603000000013dead}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x3f}}, @msr={0x14, 0x20, {0x603000000013f08a, 0x3}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0xf8d, 0x50, 0x4}}, @irq_setup={0x46, 0x18, {0x0, 0x2c0}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x380, 0x5a3, 0xc}}, @uexit={0x0, 0x18, 0x8}, @smc={0x1e, 0x40, {0x8400000e, [0xfffffffffffffffe, 0x1ff, 0xaae, 0x3e, 0x401]}}, @uexit={0x0, 0x18, 0x3}, @hvc={0x32, 0x40, {0xc4000001, [0x28000000000, 0x5, 0x9, 0x6, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013dce2}}, @eret={0xe6, 0x18, 0xd}, @smc={0x1e, 0x40, {0x80000001, [0xfffffffffffff492, 0x3c, 0x1ff, 0x9, 0x5edd]}}, @hvc={0x32, 0x40, {0xc4000010, [0xd09, 0x5, 0x2, 0xd5, 0xc4e3]}}], 0x428}, &(0x7f0000000600)=[@featur1={0x1, 0x162}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000680)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000640)=0x6})
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f00000006c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000c00)={0x0, &(0x7f0000000740)=[@hvc={0x32, 0x40, {0xc4000007, [0x9, 0xd, 0x7, 0x2, 0x8]}}, @svc={0x122, 0x40, {0x84000002, [0x1, 0x9, 0x0, 0x6, 0xe]}}, @uexit={0x0, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x3, 0xb}}, @msr={0x14, 0x20, {0x603000000013e659, 0x744}}, @hvc={0x32, 0x40, {0xc4000010, [0x9, 0x5, 0x8, 0x4d, 0x5]}}, @uexit={0x0, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x4, 0x31e}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x3, 0x2, 0x6, 0xd, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x4, 0x10, 0x8, 0x5, 0x1}}, @hvc={0x32, 0x40, {0x20, [0x9, 0xfc7, 0x200, 0xfffffffffffffffa, 0x3]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0xe}}, @eret={0xe6, 0x18, 0x1}, @smc={0x1e, 0x40, {0x800, [0x2, 0x101, 0x6, 0x40, 0x9]}}, @svc={0x122, 0x40, {0x100, [0x8000000000000000, 0x100, 0x2, 0x7fffffffffffffff, 0x6]}}, @hvc={0x32, 0x40, {0xc4000004, [0x2, 0x8, 0xa254, 0x3, 0x3]}}, @irq_setup={0x46, 0x18, {0x1, 0x1f3}}, @its_setup={0x82, 0x28, {0x7e31, 0x0, 0x2f5}}, @eret={0xe6, 0x18, 0x4000}, @svc={0x122, 0x40, {0x0, [0x8001, 0x7fffffff, 0x9, 0x7b4, 0xffffffffffffffff]}}, @irq_setup={0x46, 0x18, {0x3, 0xf}}, @code={0xa, 0x6c, {"40fe9ed20040b0f2a10180d2220180d2630080d2e40080d2020000d4007008d5007008d5403485d200c0b8f2610080d2220080d2a30180d2e40180d2020000d49f2003d500000011000c601e0068000e008008d500a4002f"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xff98, 0x8, 0x3}}, @svc={0x122, 0x40, {0x84000012, [0x9, 0xffff, 0xdb1, 0x4, 0x9]}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x6}}, @mrs={0xbe, 0x18, {0x603000000013e601}}], 0x494}, &(0x7f0000000c40)=[@featur1={0x1, 0xd4}], 0x1)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000c80)=0x3)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000cc0)={0x5, 0x80a0000, 0x0, r2})
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000d00)={0xd000, 0xeeef0000, 0xffffffff, 0x1, 0x4})
r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000d40)={0x400, 0x80})
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_GET_REGS(r3, 0x8360ae81, &(0x7f0000000d80))
syz_kvm_setup_cpu$arm64(r0, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001080)=[{0x0, &(0x7f0000000e40)=[@svc={0x122, 0x40, {0x84000002, [0x9, 0x400, 0xf, 0xf, 0x9]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0xc2}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0xc9}}, @smc={0x1e, 0x40, {0xc5000021, [0x6, 0x3, 0xfffffffffffffff8, 0x8000, 0x63e0]}}, @uexit={0x0, 0x18, 0xfff}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0x8, 0xd, 0x1734, 0x3}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x281}}, @irq_setup={0x46, 0x18, {0x0, 0x1e1}}, @svc={0x122, 0x40, {0x4, [0xfc6, 0x831, 0xffff, 0x6, 0x6db2]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x8, 0x10000, 0x7}}, @smc={0x1e, 0x40, {0x84000009, [0x3, 0xffffffffffffffff, 0x2, 0x4, 0x1000]}}, @eret={0xe6, 0x18}], 0x210}], 0x1, 0x0, &(0x7f00000010c0)=[@featur2={0x1, 0x20}], 0x1)
ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000001100)={0xc0, 0x0, 0x4000})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000001180))
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000001240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001200)={0x9, 0xd8}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000001400)={0x0, &(0x7f0000001280)=[@svc={0x122, 0x40, {0x84000010, [0x3, 0x0, 0x9a8, 0x8, 0x7]}}, @smc={0x1e, 0x40, {0x8600ff01, [0xffffffffffff4c9a, 0x8580, 0xd, 0x0, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0x0, 0x2, 0xff}}, @irq_setup={0x46, 0x18, {0x0, 0x177}}, @hvc={0x32, 0x40, {0x0, [0x1, 0xf32, 0x5, 0x7, 0x7]}}, @eret={0xe6, 0x18, 0x9cd9}, @svc={0x122, 0x40, {0x80000002, [0x6, 0x30000000, 0x1, 0x6, 0x8]}}], 0x158}, &(0x7f0000001440)=[@featur1={0x1, 0x24}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f00000014c0)=@attr_other={0x0, 0xcbd0, 0x8, &(0x7f0000001480)=0x1})

2m1.707728895s ago: executing program 2 (id=263):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x7fffffff}) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10002}) (async, rerun: 32)
r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000640)=[@smc={0x1e, 0x40, {0x84000011, [0x0, 0x4, 0x0, 0x4, 0x8001]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x30}], 0x1) (rerun: 32)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa, 0x1}}) (async)
r16 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x3, 0x9}}) (async)
r17 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r17, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81})
r18 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r18, 0x801c581f, 0x0) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (rerun: 64)

1m58.656147932s ago: executing program 9 (id=264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7fffffff, 0x2}})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000000)=ANY=[])
r9 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0)

1m41.11041579s ago: executing program 2 (id=265):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x1}}], 0x30}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m31.098329228s ago: executing program 9 (id=266):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r6, 0x400454d1, 0x110c330021)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000001)

1m17.97155855s ago: executing program 2 (id=267):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x4, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r5})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x0, 0xfffffffffffffffe})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f00000000c0)=0xffffffffffffffff})
close(0x5)

1m7.209804506s ago: executing program 9 (id=268):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400840, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5e6) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c01a, &(0x7f0000000000)=0x2})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138017, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
syz_kvm_assert_reg(r6, 0x6030000000138017, 0x8000) (async)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x18, 0x400}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x0, [0xa, 0x1, 0x1, 0x0, 0x4f2a]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x9, 0x8}}, @msr={0x14, 0x20, {0x603000000013d807, 0xfffffffffffffffc}}, @msr={0x14, 0x20, {0x603000000013f665, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x1, 0xa, 0x0, 0x80000001, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x20c, 0x2, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x14}}, @memwrite={0x6e, 0x30, @generic={0x1800, 0x83f, 0x0, 0xc}}, @svc={0x122, 0x40, {0x8400000d, [0x80000001, 0x8000000000000001, 0xb98b, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c641}}, @smc={0x1e, 0x40, {0xc5000021, [0x1000, 0x5, 0x8, 0x4, 0x9183]}}, @code={0xa, 0x54, {"000028d5c03999d20020b0f2810180d2620180d2230180d2a40080d2020000d4000840f8008008d5008008d500c8215e007008d500d4202e000028d5007008d5"}}], 0x27c}, &(0x7f0000000040), 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r7, 0x4208ae9b, &(0x7f0000000480)={0x20000, 0x0, {[0x0, 0x346d, 0x6, 0x2, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x22dc, 0x1, 0x800, 0x8, 0x3, 0x7], [0x3, 0x4, 0x7, 0x1c0000000, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x8, 0x2c12ef21, 0x6, 0x0, 0xfff, 0x80, 0x7fff], [0x400, 0x2, 0xffffffffffffa6a2, 0x8, 0x3, 0x6, 0x2, 0x2, 0x3f039f37, 0xfffffffffffffff9, 0x6, 0x6, 0x4, 0x9, 0xfff, 0x3d0], [0x7, 0x1, 0x9, 0x8, 0x8, 0x9, 0x3, 0x9, 0x4, 0x3, 0x1, 0x8, 0xfffffffffffff367, 0x4, 0x5, 0x1]}})

51.614351244s ago: executing program 2 (id=269):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0xffffffff87bdf123, 0x100, 0xfffffffffffffff9, 0x4, 0x80000001}}, {0x10000, 0x1, 0x1, 0x0, @adapter={0x7b, 0x9, 0x0, 0x443, 0x8}}]}) (async)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x2710, 0x2, 0xdddd1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, r5})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)

18.618396068s ago: executing program 43 (id=268):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400840, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5e6) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_sys={0x603000000013c01a, &(0x7f0000000000)=0x2})
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138017, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
syz_kvm_assert_reg(r6, 0x6030000000138017, 0x8000) (async)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x18, 0x400}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x0, [0xa, 0x1, 0x1, 0x0, 0x4f2a]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x18, 0x9, 0x8}}, @msr={0x14, 0x20, {0x603000000013d807, 0xfffffffffffffffc}}, @msr={0x14, 0x20, {0x603000000013f665, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x1, 0xa, 0x0, 0x80000001, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x20c, 0x2, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x14}}, @memwrite={0x6e, 0x30, @generic={0x1800, 0x83f, 0x0, 0xc}}, @svc={0x122, 0x40, {0x8400000d, [0x80000001, 0x8000000000000001, 0xb98b, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c641}}, @smc={0x1e, 0x40, {0xc5000021, [0x1000, 0x5, 0x8, 0x4, 0x9183]}}, @code={0xa, 0x54, {"000028d5c03999d20020b0f2810180d2620180d2230180d2a40080d2020000d4000840f8008008d5008008d500c8215e007008d500d4202e000028d5007008d5"}}], 0x27c}, &(0x7f0000000040), 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r7, 0x4208ae9b, &(0x7f0000000480)={0x20000, 0x0, {[0x0, 0x346d, 0x6, 0x2, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x22dc, 0x1, 0x800, 0x8, 0x3, 0x7], [0x3, 0x4, 0x7, 0x1c0000000, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x8, 0x2c12ef21, 0x6, 0x0, 0xfff, 0x80, 0x7fff], [0x400, 0x2, 0xffffffffffffa6a2, 0x8, 0x3, 0x6, 0x2, 0x2, 0x3f039f37, 0xfffffffffffffff9, 0x6, 0x6, 0x4, 0x9, 0xfff, 0x3d0], [0x7, 0x1, 0x9, 0x8, 0x8, 0x9, 0x3, 0x9, 0x4, 0x3, 0x1, 0x8, 0xfffffffffffff367, 0x4, 0x5, 0x1]}})

0s ago: executing program 44 (id=269):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0xffffffff87bdf123, 0x100, 0xfffffffffffffff9, 0x4, 0x80000001}}, {0x10000, 0x1, 0x1, 0x0, @adapter={0x7b, 0x9, 0x0, 0x443, 0x8}}]}) (async)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x2710, 0x2, 0xdddd1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, r5})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)

kernel console output (not intermixed with test programs):

[  384.463651][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.004038][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:4410' (ED25519) to the list of known hosts.
[  596.133976][   T25] audit: type=1400 audit(595.350:60): avc:  denied  { name_bind } for  pid=3322 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  596.983956][   T25] audit: type=1400 audit(596.200:61): avc:  denied  { execute } for  pid=3323 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  597.012864][   T25] audit: type=1400 audit(596.230:62): avc:  denied  { execute_no_trans } for  pid=3323 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  616.530822][   T25] audit: type=1400 audit(615.750:63): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  616.567131][   T25] audit: type=1400 audit(615.780:64): avc:  denied  { mount } for  pid=3323 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  616.654800][ T3323] cgroup: Unknown subsys name 'net'
[  616.732571][   T25] audit: type=1400 audit(615.950:65): avc:  denied  { unmount } for  pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  617.196904][ T3323] cgroup: Unknown subsys name 'cpuset'
[  617.329751][ T3323] cgroup: Unknown subsys name 'rlimit'
[  618.294899][   T25] audit: type=1400 audit(617.510:66): avc:  denied  { setattr } for  pid=3323 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  618.317806][   T25] audit: type=1400 audit(617.530:67): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  618.340627][   T25] audit: type=1400 audit(617.560:68): avc:  denied  { mount } for  pid=3323 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  619.363094][ T3327] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  619.383261][   T25] audit: type=1400 audit(618.600:69): avc:  denied  { relabelto } for  pid=3327 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  619.410604][   T25] audit: type=1400 audit(618.630:70): avc:  denied  { write } for  pid=3327 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  619.591710][   T25] audit: type=1400 audit(618.810:71): avc:  denied  { read } for  pid=3323 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  619.614485][   T25] audit: type=1400 audit(618.820:72): avc:  denied  { open } for  pid=3323 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  619.661395][ T3323] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  671.907247][   T25] audit: type=1400 audit(671.110:73): avc:  denied  { execmem } for  pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  676.324739][   T25] audit: type=1400 audit(675.540:74): avc:  denied  { read } for  pid=3331 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  676.362324][   T25] audit: type=1400 audit(675.580:75): avc:  denied  { open } for  pid=3330 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  676.428236][   T25] audit: type=1400 audit(675.630:76): avc:  denied  { mounton } for  pid=3331 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  676.696754][   T25] audit: type=1400 audit(675.910:77): avc:  denied  { module_request } for  pid=3330 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  676.731753][   T25] audit: type=1400 audit(675.950:78): avc:  denied  { module_request } for  pid=3331 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  677.669344][   T25] audit: type=1400 audit(676.880:79): avc:  denied  { sys_module } for  pid=3331 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  700.973252][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.413961][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.278550][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.754881][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.611144][ T3330] hsr_slave_0: entered promiscuous mode
[  715.641104][ T3330] hsr_slave_1: entered promiscuous mode
[  716.671163][ T3331] hsr_slave_0: entered promiscuous mode
[  716.703183][ T3331] hsr_slave_1: entered promiscuous mode
[  716.725107][ T3331] debugfs: 'hsr0' already exists in 'hsr'
[  716.747336][ T3331] Cannot create hsr debugfs directory
[  722.057980][   T25] audit: type=1400 audit(721.270:80): avc:  denied  { create } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  722.104375][   T25] audit: type=1400 audit(721.320:81): avc:  denied  { write } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  722.165004][   T25] audit: type=1400 audit(721.380:82): avc:  denied  { read } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  722.307983][ T3330] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  722.668830][ T3330] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  723.020046][ T3330] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  723.321361][ T3330] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  724.891039][ T3331] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  725.045061][ T3331] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  725.190522][ T3331] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  725.402119][ T3331] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  737.303112][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.213449][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.872054][ T3330] veth0_vlan: entered promiscuous mode
[  795.320682][ T3330] veth1_vlan: entered promiscuous mode
[  796.972365][ T3331] veth0_vlan: entered promiscuous mode
[  797.681039][ T3330] veth0_macvtap: entered promiscuous mode
[  797.904779][ T3331] veth1_vlan: entered promiscuous mode
[  798.133474][ T3330] veth1_macvtap: entered promiscuous mode
[  800.163116][ T3331] veth0_macvtap: entered promiscuous mode
[  800.653712][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  800.714845][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  800.733525][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  800.843265][ T3331] veth1_macvtap: entered promiscuous mode
[  800.931882][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  803.269361][   T25] audit: type=1400 audit(802.410:83): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  803.471818][   T25] audit: type=1400 audit(802.640:84): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.awtadI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  803.600941][   T25] audit: type=1400 audit(802.820:85): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  803.710652][ T3370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  803.718253][ T3370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  803.762109][ T3370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  803.763387][ T3370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  804.044692][   T25] audit: type=1400 audit(803.260:86): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.awtadI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  804.204843][   T25] audit: type=1400 audit(803.420:87): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.awtadI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  804.800285][   T25] audit: type=1400 audit(803.990:88): avc:  denied  { unmount } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  804.991313][   T25] audit: type=1400 audit(804.210:89): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  805.217631][   T25] audit: type=1400 audit(804.430:90): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="gadgetfs" ino=3789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  805.687092][   T25] audit: type=1400 audit(804.820:91): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  805.798233][   T25] audit: type=1400 audit(805.010:92): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  806.703175][ T3330] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  816.917899][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  816.927444][   T25] audit: type=1400 audit(816.130:97): avc:  denied  { read } for  pid=3486 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  816.958488][   T25] audit: type=1400 audit(816.160:98): avc:  denied  { open } for  pid=3486 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  817.077634][   T25] audit: type=1400 audit(816.290:99): avc:  denied  { ioctl } for  pid=3486 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  831.568790][   T25] audit: type=1400 audit(830.780:100): avc:  denied  { write } for  pid=3499 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  834.618801][   T25] audit: type=1400 audit(833.830:101): avc:  denied  { append } for  pid=3496 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  849.292808][   T25] audit: type=1400 audit(848.510:102): avc:  denied  { execute } for  pid=3510 comm="syz.0.6" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  898.049454][   T25] audit: type=1400 audit(897.260:103): avc:  denied  { create } for  pid=3549 comm="syz.0.17" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  918.053594][   T25] audit: type=1400 audit(917.270:104): avc:  denied  { execute } for  pid=3560 comm="syz.0.20" path=2F392F10FBFF67525673312B0104 dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1104.673926][ T3369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1105.913693][ T3369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.824112][ T3369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.993658][ T3369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1121.722003][ T3369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1121.883120][ T3369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1122.041374][ T3369] bond0 (unregistering): Released all slaves
[ 1124.509106][ T3369] hsr_slave_0: left promiscuous mode
[ 1124.638140][ T3369] hsr_slave_1: left promiscuous mode
[ 1125.168154][ T3369] veth1_macvtap: left promiscuous mode
[ 1125.177789][ T3369] veth0_macvtap: left promiscuous mode
[ 1125.193773][ T3369] veth1_vlan: left promiscuous mode
[ 1125.220748][ T3369] veth0_vlan: left promiscuous mode
[ 1144.618760][ T3369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.451366][ T3369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.469448][ T3369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.433438][ T3369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1160.963570][ T3369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1161.042468][ T3369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1161.104385][ T3369] bond0 (unregistering): Released all slaves
[ 1162.480075][ T3369] hsr_slave_0: left promiscuous mode
[ 1162.525320][ T3369] hsr_slave_1: left promiscuous mode
[ 1162.909452][ T3369] veth1_macvtap: left promiscuous mode
[ 1162.937339][ T3369] veth0_macvtap: left promiscuous mode
[ 1162.949880][ T3369] veth1_vlan: left promiscuous mode
[ 1162.961953][ T3369] veth0_vlan: left promiscuous mode
[ 1189.435038][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1189.754392][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1193.535466][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1193.790642][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1210.883465][ T3639] hsr_slave_0: entered promiscuous mode
[ 1210.950841][ T3639] hsr_slave_1: entered promiscuous mode
[ 1214.371850][ T3642] hsr_slave_0: entered promiscuous mode
[ 1214.410591][ T3642] hsr_slave_1: entered promiscuous mode
[ 1214.434756][ T3642] debugfs: 'hsr0' already exists in 'hsr'
[ 1214.457179][ T3642] Cannot create hsr debugfs directory
[ 1223.945480][ T3639] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1224.495334][ T3639] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1225.070371][ T3639] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1225.455414][ T3639] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1229.065296][ T3642] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1229.404500][ T3642] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1229.611508][ T3642] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1229.920906][ T3642] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1249.572559][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1254.152280][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1338.845090][ T3639] veth0_vlan: entered promiscuous mode
[ 1339.700870][ T3639] veth1_vlan: entered promiscuous mode
[ 1342.812690][ T3642] veth0_vlan: entered promiscuous mode
[ 1343.554878][ T3639] veth0_macvtap: entered promiscuous mode
[ 1344.378853][ T3642] veth1_vlan: entered promiscuous mode
[ 1344.513145][ T3639] veth1_macvtap: entered promiscuous mode
[ 1348.356667][ T3383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1348.361365][ T3383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1348.373919][ T3383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1348.607277][ T3383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1349.109481][ T3642] veth0_macvtap: entered promiscuous mode
[ 1350.063497][ T3642] veth1_macvtap: entered promiscuous mode
[ 1352.260051][   T25] audit: type=1400 audit(1351.400:105): avc:  denied  { mounton } for  pid=3639 comm="syz-executor" path="/syzkaller.Rz0D9D/syz-tmp" dev="vda" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 1354.687928][ T2121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.698815][ T2121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.700050][ T2121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.700901][ T2121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1440.322564][ T3383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.750983][ T3383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.833419][ T3383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1447.160584][ T3383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1469.683051][ T3383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1470.077486][ T3383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1470.242938][ T3383] bond0 (unregistering): Released all slaves
[ 1472.650163][ T3383] hsr_slave_0: left promiscuous mode
[ 1472.762955][ T3383] hsr_slave_1: left promiscuous mode
[ 1473.664746][ T3383] veth1_macvtap: left promiscuous mode
[ 1473.729755][ T3383] veth0_macvtap: left promiscuous mode
[ 1473.752300][ T3383] veth1_vlan: left promiscuous mode
[ 1473.799057][ T3383] veth0_vlan: left promiscuous mode
[ 1569.484953][ T3913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1569.909294][ T3913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1599.675239][ T3913] hsr_slave_0: entered promiscuous mode
[ 1599.822474][ T3913] hsr_slave_1: entered promiscuous mode
[ 1621.360511][ T3913] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1621.978179][ T3913] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1622.478791][ T3913] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1623.012436][ T3913] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1648.985437][   T25] audit: type=1400 audit(1648.200:106): avc:  denied  { map } for  pid=4066 comm="syz.3.67" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1653.423041][ T3913] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1750.715195][ T3841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1752.382570][ T3841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1754.009438][ T3841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1755.675453][ T3841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1777.424801][ T3841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1777.731287][ T3841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1777.931523][ T3841] bond0 (unregistering): Released all slaves
[ 1780.069375][ T3841] hsr_slave_0: left promiscuous mode
[ 1780.378086][ T3841] hsr_slave_1: left promiscuous mode
[ 1780.986818][ T3841] veth1_macvtap: left promiscuous mode
[ 1780.998500][ T3841] veth0_macvtap: left promiscuous mode
[ 1781.008637][ T3841] veth1_vlan: left promiscuous mode
[ 1781.022287][ T3841] veth0_vlan: left promiscuous mode
[ 1824.432609][ T3913] veth0_vlan: entered promiscuous mode
[ 1826.810136][ T3913] veth1_vlan: entered promiscuous mode
[ 1829.360347][ T3913] veth0_macvtap: entered promiscuous mode
[ 1829.831082][ T3913] veth1_macvtap: entered promiscuous mode
[ 1832.422384][ T4127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.438318][ T4127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.452343][ T4127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.453254][ T4127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.183295][ T4121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1842.681494][ T4121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1872.969912][   T25] audit: type=1400 audit(1872.180:107): avc:  denied  { execute } for  pid=4208 comm="syz.4.72" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1874.637857][   T25] audit: type=1400 audit(1873.830:108): avc:  denied  { ioctl } for  pid=4208 comm="syz.4.72" path="net:[4026532618]" dev="nsfs" ino=4026532618 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1884.733920][ T4121] hsr_slave_0: entered promiscuous mode
[ 1884.877492][ T4121] hsr_slave_1: entered promiscuous mode
[ 1884.914241][ T4121] debugfs: 'hsr0' already exists in 'hsr'
[ 1884.969729][ T4121] Cannot create hsr debugfs directory
[ 1897.024833][   T25] audit: type=1400 audit(1896.240:109): avc:  denied  { setattr } for  pid=4224 comm="syz.4.74" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1904.012185][ T4121] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1904.512740][ T4121] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1904.969571][ T4121] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1905.440708][ T4121] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1942.240366][ T4121] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2100.369209][ T4121] veth0_vlan: entered promiscuous mode
[ 2101.618370][ T4121] veth1_vlan: entered promiscuous mode
[ 2105.812828][ T4121] veth0_macvtap: entered promiscuous mode
[ 2106.522444][ T4121] veth1_macvtap: entered promiscuous mode
[ 2111.095391][ T3845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2111.102986][ T3845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2111.179037][ T3845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2111.180176][ T3845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2198.663800][ T3845] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2200.104709][ T3845] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2201.402247][ T3845] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2202.998318][ T3845] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2225.620918][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2225.810713][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2225.998175][ T3845] bond0 (unregistering): Released all slaves
[ 2230.290946][ T3845] hsr_slave_0: left promiscuous mode
[ 2230.457144][ T3845] hsr_slave_1: left promiscuous mode
[ 2231.463653][ T3845] veth1_macvtap: left promiscuous mode
[ 2231.573829][ T3845] veth0_macvtap: left promiscuous mode
[ 2231.618392][ T3845] veth1_vlan: left promiscuous mode
[ 2231.633511][ T3845] veth0_vlan: left promiscuous mode
[ 2261.955378][ T3845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2263.687929][ T3845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2265.044993][ T3845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2266.183744][ T3845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2288.875154][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2289.060338][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2289.245340][ T3845] bond0 (unregistering): Released all slaves
[ 2291.713829][ T3845] hsr_slave_0: left promiscuous mode
[ 2291.798947][ T3845] hsr_slave_1: left promiscuous mode
[ 2292.437186][ T3845] veth1_macvtap: left promiscuous mode
[ 2292.438531][ T3845] veth0_macvtap: left promiscuous mode
[ 2292.444169][ T3845] veth1_vlan: left promiscuous mode
[ 2292.474839][ T3845] veth0_vlan: left promiscuous mode
[ 2343.150743][ T4400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2343.474800][ T4400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2347.628230][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2348.009241][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2371.922748][ T4400] hsr_slave_0: entered promiscuous mode
[ 2372.064239][ T4400] hsr_slave_1: entered promiscuous mode
[ 2375.650628][ T4403] hsr_slave_0: entered promiscuous mode
[ 2375.690521][ T4403] hsr_slave_1: entered promiscuous mode
[ 2375.762172][ T4403] debugfs: 'hsr0' already exists in 'hsr'
[ 2375.775320][ T4403] Cannot create hsr debugfs directory
[ 2391.830717][ T4400] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2392.762555][ T4400] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2393.629629][ T4400] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2395.317803][ T4400] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2399.880077][ T4403] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2400.683495][ T4403] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2401.648943][ T4403] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2402.307340][ T4403] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2433.291780][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2437.382236][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2576.920037][ T4400] veth0_vlan: entered promiscuous mode
[ 2578.261373][ T4400] veth1_vlan: entered promiscuous mode
[ 2582.333865][ T4403] veth0_vlan: entered promiscuous mode
[ 2584.741815][ T4403] veth1_vlan: entered promiscuous mode
[ 2585.412837][ T4400] veth0_macvtap: entered promiscuous mode
[ 2586.920711][ T4400] veth1_macvtap: entered promiscuous mode
[ 2591.833495][ T4403] veth0_macvtap: entered promiscuous mode
[ 2593.478384][ T4403] veth1_macvtap: entered promiscuous mode
[ 2593.723224][ T4132] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2593.738602][ T4132] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2593.779992][ T4127] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2593.799223][ T2121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2600.992011][ T3772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2601.035035][ T3369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2601.155416][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2601.240408][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2767.920721][ T4423] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2770.743791][ T4423] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2773.470783][ T4423] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2776.260125][ T4423] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2813.488931][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2814.097978][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2814.451187][ T4423] bond0 (unregistering): Released all slaves
[ 2818.399378][ T4423] hsr_slave_0: left promiscuous mode
[ 2818.592145][ T4423] hsr_slave_1: left promiscuous mode
[ 2819.921335][ T4423] veth1_macvtap: left promiscuous mode
[ 2819.960257][ T4423] veth0_macvtap: left promiscuous mode
[ 2820.000097][ T4423] veth1_vlan: left promiscuous mode
[ 2820.072623][ T4423] veth0_vlan: left promiscuous mode
[ 2953.741969][ T4730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2954.314926][ T4730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3002.794842][ T4730] hsr_slave_0: entered promiscuous mode
[ 3003.063415][ T4730] hsr_slave_1: entered promiscuous mode
[ 3003.187825][ T4730] debugfs: 'hsr0' already exists in 'hsr'
[ 3003.217231][ T4730] Cannot create hsr debugfs directory
[ 3032.288041][ T4730] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3032.882294][ T4730] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3033.494914][ T4730] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3034.123655][ T4730] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3078.248987][ T4730] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3284.611968][ T4730] veth0_vlan: entered promiscuous mode
[ 3285.914076][ T4730] veth1_vlan: entered promiscuous mode
[ 3290.988859][ T4730] veth0_macvtap: entered promiscuous mode
[ 3292.073000][ T4730] veth1_macvtap: entered promiscuous mode
[ 3297.688199][ T4423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3297.729174][ T4132] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3297.777289][ T4132] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3297.928105][ T4132] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3310.373248][ T2121] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3313.045040][ T2121] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3315.983210][ T2121] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3318.944501][ T2121] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3362.834692][ T2121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3363.742610][ T2121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3364.219610][ T2121] bond0 (unregistering): Released all slaves
[ 3368.019656][ T2121] hsr_slave_0: left promiscuous mode
[ 3368.153464][ T2121] hsr_slave_1: left promiscuous mode
[ 3369.241659][ T2121] veth1_macvtap: left promiscuous mode
[ 3369.245058][ T2121] veth0_macvtap: left promiscuous mode
[ 3369.358457][ T2121] veth1_vlan: left promiscuous mode
[ 3369.377752][ T2121] veth0_vlan: left promiscuous mode
[ 3467.824336][ T3370] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3470.113608][ T3370] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3472.223162][ T3370] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3474.910510][ T3370] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3511.393787][ T3370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3512.041419][ T3370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3512.452394][ T3370] bond0 (unregistering): Released all slaves
[ 3515.168269][ T3370] hsr_slave_0: left promiscuous mode
[ 3515.195138][ T3370] hsr_slave_1: left promiscuous mode
[ 3515.420858][ T3370] veth1_macvtap: left promiscuous mode
[ 3515.424441][ T3370] veth0_macvtap: left promiscuous mode
[ 3515.435483][ T3370] veth1_vlan: left promiscuous mode
[ 3515.514158][ T3370] veth0_vlan: left promiscuous mode
[ 3538.748706][ T4983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3539.311183][ T4983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3572.694804][ T5020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3573.095149][ T5020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3579.300683][ T4983] hsr_slave_0: entered promiscuous mode
[ 3579.404022][ T4983] hsr_slave_1: entered promiscuous mode
[ 3602.102115][ T4983] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3602.694582][ T4983] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3603.617215][ T4983] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3604.233949][ T4983] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3614.071969][ T5020] hsr_slave_0: entered promiscuous mode
[ 3614.322542][ T5020] hsr_slave_1: entered promiscuous mode
[ 3614.461323][ T5020] debugfs: 'hsr0' already exists in 'hsr'
[ 3614.476930][ T5020] Cannot create hsr debugfs directory
[ 3654.312837][ T4983] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3655.279162][ T5020] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3656.172381][ T5020] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3656.798093][ T5020] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3657.512666][ T5020] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3701.195218][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3828.917519][ T4983] veth0_vlan: entered promiscuous mode
[ 3830.073224][ T4983] veth1_vlan: entered promiscuous mode
[ 3834.201668][ T4983] veth0_macvtap: entered promiscuous mode
[ 3835.214016][ T4983] veth1_macvtap: entered promiscuous mode
[ 3839.509357][ T5158] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3839.527713][ T5158] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3839.571353][ T5148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3839.608899][ T4132] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3845.688897][ T5020] veth0_vlan: entered promiscuous mode
[ 3848.217289][ T5020] veth1_vlan: entered promiscuous mode
[ 3855.791942][ T5020] veth0_macvtap: entered promiscuous mode
[ 3857.712918][ T5020] veth1_macvtap: entered promiscuous mode
[ 3867.318240][ T3841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3867.381353][ T3841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3867.409468][ T2121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3867.423344][ T5148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3887.474328][ T3845] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3890.097242][ T3845] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3893.134203][ T3845] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3896.361039][ T3845] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3936.117557][ T3845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3936.887687][ T3845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3937.389979][ T3845] bond0 (unregistering): Released all slaves
[ 3941.378348][ T3845] hsr_slave_0: left promiscuous mode
[ 3941.729307][ T3845] hsr_slave_1: left promiscuous mode
[ 3943.030568][ T3845] veth1_macvtap: left promiscuous mode
[ 3943.107507][ T3845] veth0_macvtap: left promiscuous mode
[ 3943.118894][ T3845] veth1_vlan: left promiscuous mode
[ 3943.120486][ T3845] veth0_vlan: left promiscuous mode
[ 4091.184785][ T5265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4091.797787][ T5265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4145.224569][ T5265] hsr_slave_0: entered promiscuous mode
[ 4145.478941][ T5265] hsr_slave_1: entered promiscuous mode
[ 4189.483501][ T5265] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 4190.198454][ T5265] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 4190.771268][ T5265] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 4191.491130][ T5265] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 4239.744337][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4443.902846][ T5265] veth0_vlan: entered promiscuous mode
[ 4445.895526][ T5265] veth1_vlan: entered promiscuous mode
[ 4451.412337][ T5265] veth0_macvtap: entered promiscuous mode
[ 4452.302194][ T5265] veth1_macvtap: entered promiscuous mode
[ 4458.027946][ T4132] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4458.045530][ T4132] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4458.097143][ T4132] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4458.098052][ T4132] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4525.114576][ T5536] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4528.455306][ T5536] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4531.593544][ T5536] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4534.085449][ T5536] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4577.078614][ T5536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4577.613497][ T5536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4578.070838][ T5536] bond0 (unregistering): Released all slaves
[ 4582.094907][ T5536] hsr_slave_0: left promiscuous mode
[ 4582.348856][ T5536] hsr_slave_1: left promiscuous mode
[ 4583.780021][ T5536] veth1_macvtap: left promiscuous mode
[ 4583.819229][ T5536] veth0_macvtap: left promiscuous mode
[ 4583.839638][ T5536] veth1_vlan: left promiscuous mode
[ 4583.841268][ T5536] veth0_vlan: left promiscuous mode
[ 4727.903495][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4728.415432][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4782.781177][ T5560] hsr_slave_0: entered promiscuous mode
[ 4783.012394][ T5560] hsr_slave_1: entered promiscuous mode
[ 4826.221658][ T5560] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 4827.064757][ T5560] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 4828.004460][ T5560] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 4829.129941][ T5560] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 4879.574109][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5181.579557][ T5536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5182.240042][ T5536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5182.640387][ T5536] bond0 (unregistering): Released all slaves
[ 5187.291338][ T5536] hsr_slave_0: left promiscuous mode
[ 5187.596852][ T5536] hsr_slave_1: left promiscuous mode
[ 5345.390556][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5345.973164][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5404.862479][ T5849] hsr_slave_0: entered promiscuous mode
[ 5405.031865][ T5849] hsr_slave_1: entered promiscuous mode
[ 5451.282286][ T5849] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5452.215207][ T5849] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5453.122835][ T5849] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5454.219118][ T5849] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5506.070982][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5786.274491][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5787.403810][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5787.829798][ T4419] bond0 (unregistering): Released all slaves
[ 5792.107542][ T4419] hsr_slave_0: left promiscuous mode
[ 5792.449205][ T4419] hsr_slave_1: left promiscuous mode
[ 5944.590858][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5945.112120][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6002.654322][ T6141] hsr_slave_0: entered promiscuous mode
[ 6002.822339][ T6141] hsr_slave_1: entered promiscuous mode
[ 6048.947488][ T6141] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6049.608807][ T6141] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6050.373764][ T6141] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6051.182087][ T6141] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6102.444697][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6404.294695][ T4995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6404.854042][ T4995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6405.563685][ T4995] bond0 (unregistering): Released all slaves
[ 6411.907882][ T4995] hsr_slave_0: left promiscuous mode
[ 6412.301874][ T4995] hsr_slave_1: left promiscuous mode
[ 6454.142825][ T5591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6457.358244][ T5591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6460.753825][ T5591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6462.811750][ T5591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6492.090089][ T5591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6492.580065][ T5591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6492.853469][ T5591] bond0 (unregistering): Released all slaves
[ 6496.308167][ T5591] hsr_slave_0: left promiscuous mode
[ 6496.460010][ T5591] hsr_slave_1: left promiscuous mode
[ 6497.469261][ T5591] veth1_macvtap: left promiscuous mode
[ 6497.504612][ T5591] veth0_macvtap: left promiscuous mode
[ 6497.542405][ T5591] veth1_vlan: left promiscuous mode
[ 6497.579332][ T5591] veth0_vlan: left promiscuous mode
[ 6538.478868][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6539.131499][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6569.578896][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6570.053258][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6578.135444][ T6395] hsr_slave_0: entered promiscuous mode
[ 6578.330695][ T6395] hsr_slave_1: entered promiscuous mode
[ 6613.522515][ T6413] hsr_slave_0: entered promiscuous mode
[ 6613.603149][ T6413] hsr_slave_1: entered promiscuous mode
[ 6613.724670][ T6413] debugfs: 'hsr0' already exists in 'hsr'
[ 6613.743028][ T6413] Cannot create hsr debugfs directory
[ 6617.120198][ T6395] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 6617.749981][ T6395] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 6618.408989][ T6395] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 6619.023335][ T6395] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 6652.662197][ T6413] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6653.453015][ T6413] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6654.494623][ T6413] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6655.159604][ T6413] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6665.893877][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6693.904096][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6809.909100][ T6395] veth0_vlan: entered promiscuous mode
[ 6811.315451][ T6395] veth1_vlan: entered promiscuous mode
[ 6815.673204][ T6395] veth0_macvtap: entered promiscuous mode
[ 6816.738966][ T6395] veth1_macvtap: entered promiscuous mode
[ 6821.358172][ T3772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6821.411725][ T3381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6821.414024][ T3381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6821.706691][ T3381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6875.958982][ T6413] veth0_vlan: entered promiscuous mode
[ 6877.532317][ T6413] veth1_vlan: entered promiscuous mode
[ 6882.093338][ T6413] veth0_macvtap: entered promiscuous mode
[ 6883.046491][ T6413] veth1_macvtap: entered promiscuous mode
[ 6887.293676][ T5591] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6887.373686][ T4995] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6887.427774][ T4995] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6887.470559][ T4995] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6930.025144][ T6439] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6932.610339][ T6439] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6935.522737][ T6439] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6938.014696][ T6439] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6980.457329][ T6439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6981.280181][ T6439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6981.562470][ T6439] bond0 (unregistering): Released all slaves
[ 6985.358084][ T6439] hsr_slave_0: left promiscuous mode
[ 6985.616683][ T6439] hsr_slave_1: left promiscuous mode
[ 6986.773012][ T6439] veth1_macvtap: left promiscuous mode
[ 6986.878201][ T6439] veth0_macvtap: left promiscuous mode
[ 6986.898913][ T6439] veth1_vlan: left promiscuous mode
[ 6986.900528][ T6439] veth0_vlan: left promiscuous mode
[ 7036.202507][ T6439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7038.548932][ T6439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7040.809604][ T6439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7043.451841][ T6439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 7073.307004][ T6439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 7073.870227][ T6439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 7074.294130][ T6439] bond0 (unregistering): Released all slaves
[ 7077.905174][ T6439] hsr_slave_0: left promiscuous mode
[ 7077.940055][ T6439] hsr_slave_1: left promiscuous mode
[ 7078.509318][ T6439] veth1_macvtap: left promiscuous mode
[ 7078.517690][ T6439] veth0_macvtap: left promiscuous mode
[ 7078.522261][ T6439] veth1_vlan: left promiscuous mode
[ 7078.547894][ T6439] veth0_vlan: left promiscuous mode
[ 7161.512313][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7161.964341][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7166.871498][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 7167.302090][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 7200.905438][ T6682] hsr_slave_0: entered promiscuous mode
[ 7201.088460][ T6682] hsr_slave_1: entered promiscuous mode
[ 7205.390779][ T6686] hsr_slave_0: entered promiscuous mode
[ 7205.551030][ T6686] hsr_slave_1: entered promiscuous mode
[ 7205.647748][ T6686] debugfs: 'hsr0' already exists in 'hsr'
[ 7205.648725][ T6686] Cannot create hsr debugfs directory
[ 7239.316897][ T6682] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 7242.177564][ T6682] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 7242.854987][ T6682] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 7245.390922][ T6682] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 7258.371926][ T6686] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 7258.815081][ T6686] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 7259.432339][ T6686] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 7259.833754][ T6686] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 7283.304583][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7295.858160][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[ 7433.034587][ T6686] veth0_vlan: entered promiscuous mode
[ 7434.681746][ T6686] veth1_vlan: entered promiscuous mode
[ 7439.329973][ T6686] veth0_macvtap: entered promiscuous mode
[ 7440.202155][ T6686] veth1_macvtap: entered promiscuous mode
[ 7445.161590][ T4419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7445.163154][ T4419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7445.322648][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7445.324539][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 7452.588292][ T6682] veth0_vlan: entered promiscuous mode
[ 7454.290613][ T6682] veth1_vlan: entered promiscuous mode
[ 7459.121645][ T6682] veth0_macvtap: entered promiscuous mode
[ 7460.335309][ T6682] veth1_macvtap: entered promiscuous mode
[ 7466.739265][ T3772] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7466.790906][ T3772] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7466.810733][ T3772] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7466.873651][ T4127] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8027.661715][ T7114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8028.213014][ T7114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8051.234431][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8051.894705][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8089.394377][ T7114] hsr_slave_0: entered promiscuous mode
[ 8089.631365][ T7114] hsr_slave_1: entered promiscuous mode
[ 8089.739074][ T7114] debugfs: 'hsr0' already exists in 'hsr'
[ 8089.767122][ T7114] Cannot create hsr debugfs directory
[ 8118.590304][ T7121] hsr_slave_0: entered promiscuous mode
[ 8118.701226][ T7121] hsr_slave_1: entered promiscuous mode
[ 8118.878945][ T7121] debugfs: 'hsr0' already exists in 'hsr'
[ 8118.908502][ T7121] Cannot create hsr debugfs directory
[ 8160.821429][ T7114] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 8162.320943][ T7114] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 8166.130672][ T7114] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 8169.508096][ T7114] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 8189.081103][ T7121] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 8189.958879][ T7121] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 8190.769157][ T7121] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 8191.519383][ T7121] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 8227.731683][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8243.615166][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8275.873197][   T27] INFO: task syz.2.269:7100 blocked for more than 430 seconds.
[ 8275.909697][   T27]       Not tainted syzkaller #0
[ 8275.932847][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 8275.950050][   T27] task:syz.2.269       state:D stack:0     pid:7100  tgid:7100  ppid:6686   task_flags:0x400040 flags:0x00000019
[ 8275.951709][   T27] Call trace:
[ 8275.952207][   T27]  __switch_to+0x584/0xb20 (T)
[ 8275.954287][   T27]  __schedule+0x1eec/0x33a4
[ 8275.954849][   T27]  schedule+0xac/0x27c
[ 8275.955293][   T27]  schedule_timeout+0x5c/0x1e4
[ 8276.134651][   T27]  do_wait_for_common+0x28c/0x444
[ 8276.147234][   T27]  wait_for_completion+0x44/0x5c
[ 8276.147977][   T27]  __synchronize_srcu+0x2a4/0x320
[ 8276.148528][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 8276.149011][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 8276.149470][   T27]  kvm_put_kvm+0x698/0xbe8
[ 8276.149886][   T27]  kvm_vm_release+0x58/0x78
[ 8276.150369][   T27]  __fput+0x4ac/0x980
[ 8276.150872][   T27]  ____fput+0x20/0x58
[ 8276.151319][   T27]  task_work_run+0x1bc/0x254
[ 8276.151772][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 8276.152188][   T27]  el0_svc+0x170/0x234
[ 8276.152682][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 8276.153159][   T27]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
[ 8276.330166][   T27] 
[ 8276.330166][   T27] Showing all locks held in the system:
[ 8276.369664][   T27] 1 lock held by khungtaskd/27:
[ 8276.370261][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 8276.372865][   T27] 2 locks held by getty/3197:
[ 8276.373242][   T27]  #0: 82f00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 8276.375037][   T27]  #1: fbff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 8276.519794][   T27] 4 locks held by sshd-session/3322:
[ 8276.520138][   T27] 2 locks held by syz-executor/3323:
[ 8276.520443][   T27] 2 locks held by kworker/u4:7/3383:
[ 8276.520764][   T27] 3 locks held by kworker/u4:1/4127:
[ 8276.521059][   T27] 3 locks held by kworker/u4:12/4137:
[ 8276.521364][   T27] 3 locks held by kworker/u4:3/4419:
[ 8276.521713][   T27] 3 locks held by kworker/u4:4/5591:
[ 8276.522076][   T27] 3 locks held by kworker/u4:15/6317:
[ 8276.522399][   T27] 2 locks held by kworker/u4:16/6439:
[ 8276.522746][   T27]  #0: e4f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 8276.524332][   T27]  #1: ffff80008e9e7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 8276.728601][   T27] 2 locks held by kworker/0:5/6673:
[ 8276.729129][   T27] 2 locks held by syz.9.268/7096:
[ 8276.729480][   T27] 2 locks held by kworker/u4:6/7127:
[ 8276.729799][   T27]  #0: e4f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 8276.731492][   T27]  #1: ffff80008e927c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 8276.733044][   T27] 3 locks held by kworker/u4:9/7189:
[ 8276.733381][   T27] 1 lock held by modprobe/7270:
[ 8276.733854][   T27] 
[ 8276.734131][   T27] =============================================
[ 8276.734131][   T27] 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 8296.974652][   T27] INFO: task syz.2.269:7100 blocked for more than 451 seconds.
[ 8296.983892][   T27]       Not tainted syzkaller #0
[ 8297.008553][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 8297.009128][   T27] task:syz.2.269       state:D stack:0     pid:7100  tgid:7100  ppid:6686   task_flags:0x400040 flags:0x00000019
[ 8297.009933][   T27] Call trace:
[ 8297.010229][   T27]  __switch_to+0x584/0xb20 (T)
[ 8297.010765][   T27]  __schedule+0x1eec/0x33a4
[ 8297.011208][   T27]  schedule+0xac/0x27c
[ 8297.011652][   T27]  schedule_timeout+0x5c/0x1e4
[ 8297.012122][   T27]  do_wait_for_common+0x28c/0x444
[ 8297.012575][   T27]  wait_for_completion+0x44/0x5c
[ 8297.013019][   T27]  __synchronize_srcu+0x2a4/0x320
[ 8297.013507][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 8297.013981][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 8297.014458][   T27]  kvm_put_kvm+0x698/0xbe8
[ 8297.014876][   T27]  kvm_vm_release+0x58/0x78
[ 8297.015302][   T27]  __fput+0x4ac/0x980
[ 8297.205104][   T27]  ____fput+0x20/0x58
[ 8297.243146][   T27]  task_work_run+0x1bc/0x254
[ 8297.243740][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 8297.244180][   T27]  el0_svc+0x170/0x234
[ 8297.244685][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 8297.245157][   T27]  el0t_64_sync+0x198/0x19c
[ 8297.265426][   T27] 
[ 8297.265426][   T27] Showing all locks held in the system:
[ 8297.299163][   T27] 1 lock held by khungtaskd/27:
[ 8297.299584][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 8297.301439][   T27] 2 locks held by getty/3197:
[ 8297.301782][   T27]  #0: 82f00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 8297.303501][   T27]  #1: fbff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 8297.305144][   T27] 3 locks held by kworker/u4:5/3381:
[ 8297.305474][   T27] 3 locks held by kworker/u4:7/3383:
[ 8297.430821][   T27] 3 locks held by kworker/u4:12/4137:
[ 8297.431305][   T27] 3 locks held by kworker/u4:14/4995:
[ 8297.431678][   T27] 3 locks held by kworker/u4:13/5881:
[ 8297.432053][   T27] 2 locks held by syz.9.268/7096:
[ 8297.432358][   T27] 2 locks held by syz-executor/7114:
[ 8297.432681][   T27] 2 locks held by syz-executor/7121:
[ 8297.432977][   T27] 2 locks held by kworker/u4:6/7127:
[ 8297.433268][   T27]  #0: e4f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 8297.435013][   T27]  #1: ffff80008e927c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 8297.537739][   T27] 3 locks held by kworker/u4:9/7189:
[ 8297.538153][   T27] 2 locks held by kworker/u4:6/7276:
[ 8297.538553][   T27] 
[ 8297.538792][   T27] =============================================
[ 8297.538792][   T27]