last executing test programs:

45m30.928822696s ago: executing program 1 (id=429):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x1010, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xffffffff, 0x0)

45m24.739283211s ago: executing program 1 (id=430):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x7, 0x2, 0x5, 0x3}}, @code={0xa, 0x9c, {"80288fd20000b8f2a10180d2420180d2e30180d2840080d2020000d4008008d5208d87d20080b0f2c10180d2620180d2230180d2640080d2020000d40000219e00e483d20060b8f2c10180d2620180d2e30080d2e40180d2020000d400b8207e0020005e0060df0c007008d560b68ad20080b8f2010080d2020080d2630180d2240080d2020000d4"}}, @hvc={0x32, 0x40, {0x4000000, [0x6, 0x2, 0x2, 0xb, 0x100]}}, @irq_setup={0x46, 0x18, {0x2, 0x357}}, @svc={0x122, 0x40, {0x80000000, [0xffff, 0xf2, 0x0, 0x2, 0xcd51]}}, @msr={0x14, 0x20, {0x603000000013defa, 0xb80}}, @msr={0x14, 0x20, {0x603000000013defc, 0xe00000000000}}, @svc={0x122, 0x40, {0x80000002, [0x9, 0x9, 0x7, 0x3, 0x3bcc]}}, @svc={0x122, 0x40, {0x84000013, [0x9a5, 0x0, 0x2, 0x9]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0xe0}}, @msr={0x14, 0x20, {0x603000000013e081, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013c708}}, @smc={0x1e, 0x40, {0xc400000c, [0x98a, 0xfffffffffffffe00, 0x5, 0x2, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3000, 0x101, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0xd790, 0x16f}}, @uexit={0x0, 0x18}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x19e}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0xb, 0xf0, 0x3}}], 0x37c}, &(0x7f00000003c0)=[@featur2={0x1, 0x6}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000440)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000400)=0x9})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)

45m20.94906756s ago: executing program 0 (id=431):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f0000000380)=[@irq_setup={0x46, 0x18, {0x2, 0x36b}}, @smc={0x1e, 0x40, {0xc400000d, [0x1, 0x8, 0x40, 0x6, 0xffffffffffff0000]}}], 0x58}, &(0x7f0000000080)=[@featur2={0x1, 0x89}], 0x1)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c86000/0x3000)=nil, r4, 0xb, 0x11, r3, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x120}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

45m18.657069915s ago: executing program 1 (id=432):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1f)
r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0x40000000, [0x101, 0x3, 0x3, 0xc65, 0x9100]}}, @eret={0xe6, 0x18, 0x9}, @hvc={0x32, 0x40, {0xc4000001, [0x8, 0x4, 0x100000000, 0x1, 0x100000001]}}, @code={0xa, 0x54, {"0060200d0000031e007008d5e003bfd60028210e000008d5e0778ed200c0b8f2810180d2e20180d2630180d2a40180d2020000d40000ae9e007008d50000439e"}}, @eret={0xe6, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0x8000, 0x2}}, @hvc={0x32, 0x40, {0xc4000014, [0x7, 0x5b6, 0x9, 0x4, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013e687}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x5, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x1, 0xa, 0x6, 0xc0, 0x2}}, @its_setup={0x82, 0x28, {0x6, 0x0, 0xdf}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0x8400000b, [0x2, 0xff, 0x6, 0x3, 0x7]}}, @msr={0x14, 0x20, {0x603000000013dea2, 0x1}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x3a5}}, @hvc={0x32, 0x40, {0xc4000015, [0xa99f, 0x0, 0x6, 0x7f885b540000, 0x7fff]}}, @uexit={0x0, 0x18, 0xc000000000000000}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x1ab}}, @mrs={0xbe, 0x18, {0x6030000000138046}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x2, 0x8, 0x7, 0x115282e8}}, @smc={0x1e, 0x40, {0x8, [0x4, 0x2, 0x7, 0x401, 0x2]}}, @uexit={0x0, 0x18, 0x8}], 0x3c4}, &(0x7f0000000180)=[@featur1={0x1, 0x1}], 0x1)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000006c0)=[{0x0, &(0x7f00000001c0)=[@irq_setup={0x46, 0x18, {0x3, 0x342}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x201}}, @mrs={0xbe, 0x18, {0x603000000013805f}}, @hvc={0x32, 0x40, {0x84000011, [0x9, 0x8, 0x2, 0x5, 0x6]}}], 0x98}], 0x1, 0x0, &(0x7f0000000700)=[@featur2={0x1, 0x40}], 0x1)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r9 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x40)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
r10 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x0, 0x0})
r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000002, [0x99b, 0x100000001, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000004, [0x99a, 0x3, 0xa, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r14 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r14, 0xb})
ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r14, 0x3})

45m12.455842916s ago: executing program 0 (id=433):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000000c0)=0x34)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0xc4000001, [0x0, 0x9, 0x100000001, 0x2, 0x800]}}, @hvc={0x32, 0x40, {0x8400000a, [0x0, 0x0, 0xb0af, 0x8, 0x5]}}, @smc={0x1e, 0x40, {0x200, [0x8000, 0x4, 0x9, 0xa75f, 0xa2]}}, @code={0xa, 0x6c, {"007008d5601494d20000b0f2210180d2220180d2230180d2840080d2020000d400b8a10e007008d500a4df0d401a8ed20020b0f2e10080d2a20180d2030180d2440080d2020000d4000400f8004c205e00000092008008d5"}}, @svc={0x122, 0x40, {0x8400000c, [0x2, 0xc, 0x4, 0x6, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0x4, 0x3, 0x3553, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xe, 0x9, 0x6, 0x2}}, @svc={0x122, 0x40, {0x2000000, [0x5, 0x7, 0x3460, 0x3bb, 0x9]}}, @hvc={0x32, 0x40, {0xc4000001, [0x4, 0x0, 0x8e, 0x80, 0x8]}}, @svc={0x122, 0x40, {0x40, [0x6, 0x4, 0x6, 0x9, 0x2]}}, @svc={0x122, 0x40, {0x84000001, [0x7fffffffffffffff, 0xb30, 0x7, 0x0, 0x6]}}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0x100}, @code={0xa, 0x9c, {"40b390d20020b0f2410180d2620080d2630080d2e40080d2020000d480af8fd200e0b8f2610180d2620080d2830080d2640080d2020000d4000008d50000402c00d8307e403093d20080b8f2410080d2020180d2030180d2440080d2020000d4003c004e000008d5007008d5e09c9ed200a0b0f2210080d2c20080d2630080d2040180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0xf, 0x3, 0x9, 0x3}}, @code={0xa, 0x9c, {"001ce00ee0668fd20000b0f2610080d2620180d2030080d2240080d2020000d480468dd20020b8f2c10080d2220180d2230180d2e40180d2020000d460908cd20020b8f2810080d2c20180d2c30180d2a40080d2020000d4008008d5009c004f007008d5007008d5000008d5202099d200a0b8f2a10180d2220180d2430080d2e40080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x4, 0x3ad}}, @mrs={0xbe, 0x18, {0x603000000013c2a4}}, @uexit={0x0, 0x18, 0x5b}, @eret={0xe6, 0x18, 0x7}], 0x4ac}, &(0x7f0000000040), 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x0, 0x0})

45m8.53586765s ago: executing program 1 (id=434):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f00004dd000/0x4000)=nil, 0x930, 0xa, 0x110, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x3000})
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, <r9=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
close(r5)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0})

45m6.725783161s ago: executing program 0 (id=435):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000001)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = eventfd2(0x401, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000)
write$eventfd(r5, &(0x7f0000000100)=0x3, 0x8)
r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x8})
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r10, 0x603000000013df02, 0x8000)
r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x4, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

44m57.207820044s ago: executing program 0 (id=436):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000001000d5, &(0x7f00000001c0)=0x6})
r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000100)="1d908e33738d0f54719685483b90c2785b9baee1190ec33c5dd54d3a68874d964b2adf872bc3509fe5e0f205275cc32bc77cdb798f713b686ec427b525d9f3233f0792d08ecdc65c", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x60871, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0})

44m57.008205945s ago: executing program 1 (id=437):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x7, <r4=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000b00)=@attr_other={0x0, 0x0, 0x2, 0x0})
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xffff7ffffffffffb)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})
r8 = eventfd2(0x8801, 0x800)
r9 = eventfd2(0x400, 0x1)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r9, 0x5, 0x2, r9})
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r8, 0x5, 0x2, r8})
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000))

44m47.077133952s ago: executing program 1 (id=438):
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2], 0x1)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0x3a8, 0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
close(r8)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1})
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
r13 = mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r12, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x800454d2, 0x0)
r14 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @smc={0x1e, 0x40, {0x84000052, [0x2, 0x1, 0x8000000000000003, 0x5, 0x6]}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r15, 0x1, 0x3a0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000180)={0x8})

44m46.225437961s ago: executing program 0 (id=439):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, 0x0, 0x40000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r1, 0x4fd0f096b459bd7b})

44m38.897425013s ago: executing program 0 (id=440):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000100)={0x2, 0x108000, 0x1})
r11 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x3, 0x4, 0x0})
r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0x800, [0xb, 0x7, 0x0, 0x8, 0x5]}}, @msr={0x14, 0x20, {0x603000000013de95, 0xe}}, @uexit={0x0, 0x18, 0x3}, @smc={0x1e, 0x40, {0xc400000c, [0x6, 0x1, 0x0, 0x8]}}, @msr={0x14, 0x20, {0x603000000013e108, 0x80000001}}, @svc={0x122, 0x40, {0x40000000, [0x6, 0x5, 0x14000000000000, 0x1, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x7ff, 0xa}}, @mrs={0xbe, 0x18, {0x603000000013c64b}}, @uexit={0x0, 0x18, 0x1b19}, @mrs={0xbe, 0x18, {0x603000000013de83}}, @eret={0xe6, 0x18, 0x3}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3b04, 0xf7ef, 0xe}}, @mrs={0xbe, 0x18, {0x603000000013defe}}], 0x1f0}, &(0x7f0000000040), 0x1)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, r12, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r16, 0x4004ae8b, &(0x7f00000000c0))
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)

44m0.667840597s ago: executing program 32 (id=438):
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2], 0x1)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0x3a8, 0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
close(r8)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f00000000c0)={0x1})
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
r13 = mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r12, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x800454d2, 0x0)
r14 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @smc={0x1e, 0x40, {0x84000052, [0x2, 0x1, 0x8000000000000003, 0x5, 0x6]}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r15, 0x1, 0x3a0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000180)={0x8})

43m49.365010545s ago: executing program 33 (id=440):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000100)={0x2, 0x108000, 0x1})
r11 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x3, 0x4, 0x0})
r12 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0x800, [0xb, 0x7, 0x0, 0x8, 0x5]}}, @msr={0x14, 0x20, {0x603000000013de95, 0xe}}, @uexit={0x0, 0x18, 0x3}, @smc={0x1e, 0x40, {0xc400000c, [0x6, 0x1, 0x0, 0x8]}}, @msr={0x14, 0x20, {0x603000000013e108, 0x80000001}}, @svc={0x122, 0x40, {0x40000000, [0x6, 0x5, 0x14000000000000, 0x1, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x7ff, 0xa}}, @mrs={0xbe, 0x18, {0x603000000013c64b}}, @uexit={0x0, 0x18, 0x1b19}, @mrs={0xbe, 0x18, {0x603000000013de83}}, @eret={0xe6, 0x18, 0x3}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x3b04, 0xf7ef, 0xe}}, @mrs={0xbe, 0x18, {0x603000000013defe}}], 0x1f0}, &(0x7f0000000040), 0x1)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, r12, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x28)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r16, 0x4004ae8b, &(0x7f00000000c0))
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)

39m25.769131262s ago: executing program 2 (id=441):
munmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xffff1000, 0x1000, &(0x7f00003f1000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c298}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000055000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x440000, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1})

39m15.107182174s ago: executing program 3 (id=442):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x400454cd, 0x1)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b10000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

38m38.475532713s ago: executing program 34 (id=441):
munmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xffff1000, 0x1000, &(0x7f00003f1000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c298}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000055000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x440000, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x12)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1})

38m26.229982309s ago: executing program 35 (id=442):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x400454cd, 0x1)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b10000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

26m26.309540854s ago: executing program 4 (id=481):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r4, 0x4208ae9b, &(0x7f0000000240)={0x3, 0x0, {[0x729, 0x3, 0x7, 0xfffffffffffffffd, 0x4, 0xca, 0xc679, 0xff, 0x7fffffffffffffff, 0x400000000d4b, 0xfffffffffffffffa, 0x6, 0x6, 0xc00000000000000, 0xffffffffffffffa8, 0x20000], [0x5000000000, 0x3, 0x7, 0x8, 0x7, 0x4, 0x1, 0x1, 0x100000001, 0x7ffffffc, 0x200000008001, 0x2, 0x1, 0x91f6, 0x0, 0x53], [0x80, 0xfffffffffffffff7, 0x7e, 0x0, 0x804e, 0x5f, 0x30000000000, 0x80, 0xe4, 0x7, 0x5, 0x80000001, 0x9, 0x35, 0x1, 0x1], [0x3, 0x6, 0x4, 0x2, 0x3, 0x100000000, 0x38000000, 0x8001, 0x6304, 0x8, 0x6, 0x2, 0x8, 0xf15, 0x0, 0xf]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4c200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x27)
munmap(&(0x7f0000fd6000/0x4000)=nil, 0x4000)
r11 = syz_kvm_vgic_v3_setup(r10, 0x0, 0x240)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000140)=0x7f})
syz_kvm_vgic_v3_setup(r10, 0x3, 0x80)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
r12 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r8, 0x1000002, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000040)})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x6, 0x80a0000, 0x8, 0xffffffffffffffff, 0x8})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

26m7.918916916s ago: executing program 4 (id=482):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000040)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur1={0x1, 0x70}], 0x1) (async)
r4 = mmap$KVM_VCPU(&(0x7f0000f13000/0x3000)=nil, 0x0, 0x5, 0x10, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="2c6acde19a8b59b695a8cc45e2465765edc8a87e6401ff8ac1a0f6911627d60be23e84dbd6efff8f743102b4366d346bc070f956e12c618bbe4436d3510be8da24809588512eca0a", 0x0, 0x48)

25m56.411862346s ago: executing program 4 (id=484):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0xb}, @code={0xa, 0x9c, {"205f93d20020b8f2e10180d2e20080d2e30080d2a40180d2020000d4007008d5007008d5007008d560b584d200a0b0f2410180d2a20180d2e30080d2640180d2020000d40050200e0004601e007008d580d58bd200a0b0f2a10180d2c20180d2230080d2a40180d2020000d4402689d200e0b8f2c10080d2a20080d2030180d2a40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c647, 0x10000}}, @eret={0xe6, 0x18, 0x81}, @irq_setup={0x46, 0x18, {0x0, 0x2ef}}, @smc={0x1e, 0x40, {0x0, [0x2, 0x8, 0x8000000000000000, 0x5, 0x80000001]}}, @hvc={0x32, 0x40, {0x3, [0x0, 0xc, 0x9, 0x1be4, 0x1]}}], 0x184}, 0x0, 0x0)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x9, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000040)={0x10001})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000000000001"])

25m43.530399958s ago: executing program 4 (id=486):
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000080000000100ff"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)=ANY=[@ANYBLOB="91cdbb6640d08816c153d541f1a497ae115c398fb68b41f5c9bc6e6e7c2e14c4ce2f247bc04dde0bb66dbf72a87e7c", @ANYRES32=r1, @ANYRESOCT=r0])
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
write$eventfd(r2, &(0x7f00000001c0), 0xfdef) (async)
write$eventfd(r2, &(0x7f00000001c0), 0xfdef)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000680)}, &(0x7f0000000640)=[@featur1={0x1, 0x40}], 0x1) (async)
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000680)}, &(0x7f0000000640)=[@featur1={0x1, 0x40}], 0x1)
mmap$KVM_VCPU(&(0x7f0000cdf000/0x4000)=nil, r3, 0x3000005, 0x40010, r4, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, 0x0)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) (async)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000000, [0x40000099a, 0x5cf, 0xaca, 0x6, 0x1]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x27)
syz_kvm_vgic_v3_setup(r13, 0x40000000000004, 0xc0) (async)
r14 = syz_kvm_vgic_v3_setup(r13, 0x40000000000004, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x9, &(0x7f0000000000)=0x7})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
r15 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) (async)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100004, &(0x7f0000000000)=0x300000000000})

25m29.958071041s ago: executing program 4 (id=488):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@hvc={0x32, 0x40, {0x80000000, [0xfffffffffffffde8, 0x3ff, 0x1, 0x200000000f, 0x800000b]}}], 0x40}, 0x0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r7})
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x10000, 0x4000})
r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6)
r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x444802, 0x0)

25m6.060510511s ago: executing program 4 (id=490):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@mrs={0xbe, 0x18, {0x3fe7}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x40)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x2, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x81, 0x3, &(0x7f0000000200)=0xfffffffffffffffb})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_RUN(r13, 0xae80, 0x0)

24m18.560587581s ago: executing program 36 (id=490):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@mrs={0xbe, 0x18, {0x3fe7}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x40)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x2, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x81, 0x3, &(0x7f0000000200)=0xfffffffffffffffb})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x100)
ioctl$KVM_RUN(r13, 0xae80, 0x0)

22m44.054144066s ago: executing program 5 (id=498):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9)
syz_kvm_vgic_v3_setup(r0, 0x2, 0x220) (async)
r1 = syz_kvm_vgic_v3_setup(r0, 0x2, 0x220)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x7, 0x5000, 0x4, 0xffffffffffffffff, 0x8})
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x8)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x10000, 0xd000})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000080)={0x4c, 0x10a})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f00000000c0)={0x0, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0xc00000000000, r4})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r5, 0x4068aea3, &(0x7f0000000180))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xd000, 0x102000}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xd000, 0x102000})
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x7, 0x4, &(0x7f0000000240)=0x6}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x7, 0x4, &(0x7f0000000240)=0x6})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r8 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r6, 0x1000000, 0x1010, r7, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f00000002c0)=0x4})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x3, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x3, 0xffffffffffffffff, 0x1})
r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000380)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x0, 0x83f9, 0x6, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x4, 0x8, 0x90000000, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e6d4}}, @hvc={0x32, 0x40, {0x84000009, [0x7, 0x1d6, 0x8, 0x101, 0x1]}}, @svc={0x122, 0x40, {0x8400000e, [0x0, 0x80000001, 0x7f, 0x1, 0x400]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x100, 0x8d1c, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x2, 0xd, 0x5, 0x8000, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1a00, 0x9, 0x1}}, @svc={0x122, 0x40, {0x8000, [0x2, 0x6, 0x4, 0xfffffffffffffffc, 0x4]}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x5, 0x4000000, 0x10001, 0x4}}, @code={0xa, 0x9c, {"007008d5007008d5a09c86d20080b8f2410180d2e20080d2e30080d2240180d2020000d4008008d5000028d5e0a48ad20080b0f2610180d2620180d2430180d2840080d2020000d4e0679fd200a0b0f2410080d2c20180d2630180d2040180d2020000d4007b8ad200e0b0f2e10180d2620080d2430080d2c40180d2020000d40080001f000028d5"}}, @irq_setup={0x46, 0x18, {0x4, 0x1d2}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x4c}}], 0x2b4}, &(0x7f0000000680)=[@featur1={0x1, 0xa0}], 0x1)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r6, 0x1000000, 0x20010, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000006c0)="e9b63d98d7b27db218f80c40ba335bf4cce950780aed478afd88da22f8358ce63d9cfa06c380e9459ec32d0245525cbb52b1691391e7c12237b6237168e3ddd9d9d96c7583e3faa0", 0x0, 0x48)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000780)=@attr_other={0x0, 0xfffffe01, 0x585dc682, &(0x7f0000000740)=0x6})
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000007c0)={0x2, 0x4, 0x24000000, 0x1, 0x8})
ioctl$KVM_SET_REGS(r9, 0x4360ae82, &(0x7f0000000800)={[0x80000001, 0x9, 0xe9, 0xfffffffffffff23e, 0x40, 0x5, 0x7, 0x0, 0x400, 0xde, 0x6, 0x3, 0x5, 0x8, 0x3, 0x3afc], 0x0, 0x40})
openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2d) (async)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2d)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x15)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r11, 0x4068aea3, &(0x7f0000000900)={0xe4, 0x0, 0x1}) (async)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r11, 0x4068aea3, &(0x7f0000000900)={0xe4, 0x0, 0x1})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

22m33.010167487s ago: executing program 5 (id=499):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x3})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})

22m20.571004732s ago: executing program 5 (id=500):
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a1e000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x8000})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x2, 0x1ff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x800454d2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x51)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2b)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x3, 0x80000001, 0xffffffffffffffff})
r11 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r7, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

22m7.123363362s ago: executing program 5 (id=501):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000600)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0x9, 0x7, 0x10000, 0x4}}, @smc={0x1e, 0x40, {0x4000000, [0x8000000000000000, 0x1, 0x8, 0x2]}}, @eret={0xe6, 0x18, 0xf}, @mrs={0xbe, 0x18, {0x6030000000138037}}, @irq_setup={0x46, 0x18, {0x3, 0x3b1}}, @uexit={0x0, 0x18, 0x7ff}, @smc={0x1e, 0x40, {0xc4000053, [0x3, 0x3, 0x101, 0x800, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x1ff, 0xc}}, @code={0xa, 0x6c, {"000008d5000008d50004c038008c207e001ce02ec0e681d20020b0f2410180d2220180d2630080d2840180d2020000d4000028d5000028d5806095d200c0b8f2010080d2020080d2c30180d2e40080d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0x89}, @msr={0x14, 0x20, {0x603000000013dea7, 0x52f}}, @smc={0x1e, 0x40, {0xc4000004, [0x5, 0x8, 0x3, 0x7, 0x6]}}, @smc={0x1e, 0x40, {0x6000000, [0x2, 0xffffffffffffffff, 0x7fffffffffffffff, 0x3a3, 0x1]}}, @eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013df79}}, @eret={0xe6, 0x18, 0x6}, @smc={0x1e, 0x40, {0x40000000, [0x10000, 0x4, 0x8, 0x101, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x8, 0x6, 0x9}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0xa8}}, @hvc={0x32, 0x40, {0xffff, [0x2, 0x8, 0xfffffffffffff001, 0x7f, 0x81]}}, @code={0xa, 0xcc, {"60ee9dd20040b0f2c10080d2020180d2230080d2640180d2020000d480f68bd20080b0f2610180d2420080d2a30180d2440180d2020000d4007008d5000028d5409b8ed200c0b8f2210080d2020180d2030180d2c40080d2020000d440df89d20020b8f2c10080d2420180d2030180d2640180d2020000d400109bd200e0b8f2610080d2220180d2a30080d2640180d2020000d4008008d5e0ff83d20040b0f2810180d2220180d2030080d2e40180d2020000d4007008d5"}}, @smc={0x1e, 0x40, {0xc400000d, [0x4ec8, 0x6, 0x5, 0xfffffffffffffff8, 0x2]}}, @code={0xa, 0x6c, {"000000cb000008d5007008d500a8310ea0e881d20080b0f2010180d2c20080d2e30080d2640180d2020000d4000c003c007008d520969bd200a0b0f2a10080d2820180d2a30080d2e40080d2020000d4000040d3007008d5"}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x3, 0x4, 0xf, 0xffffa04f, 0x3}}, @code={0xa, 0x6c, {"0020201e008008d5007008d50048210ee05290d200e0b8f2810180d2820080d2e30180d2640080d2020000d400b489d20040b0f2410180d2020180d2630180d2c40080d2020000d4007008d50000c0ac007008d50068210e"}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x1, 0x7, 0x9, 0x1, 0x2}}, @smc={0x1e, 0x40, {0x84000000, [0x80000000, 0x3, 0x4, 0x5, 0x7f]}}], 0x5f8}, &(0x7f0000000640)=[@featur1={0x1, 0x98}], 0x1)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000006c0)=@attr_other={0x0, 0x0, 0x975, &(0x7f0000000680)=0x6})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000700)={0x3000, 0xa000})
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000740)=@arm64)
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000780)=0x6)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000007c0)={0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000840)=@attr_other={0x0, 0x8, 0x1ff, &(0x7f0000000800)=0x5})
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000880)={0xcc9, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000900)=@attr_other={0x0, 0x6, 0x9, &(0x7f00000008c0)=0x67033e82})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000980)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000940)=0x10})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8)
ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000009c0)={0x1, 0x0, &(0x7f0000eba000/0x4000)=nil})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000a00)={0xa, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000a80)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000a40)=0x9})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000ac0)={0xeeee8000, 0x10000})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000b40)=@attr_other={0x0, 0x4, 0x9, &(0x7f0000000b00)=0x200})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000bc0)=@attr_arm64={0x0, 0x6, 0x5, &(0x7f0000000b80)=0x7ff})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000c00)={0xa8, 0x0, 0x1})
r6 = eventfd2(0x0, 0x1)
r7 = eventfd2(0x6, 0x800)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000c80)={r6, 0x8, 0x3, r7})
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000d00)=@attr_arm64={0x0, 0x2, 0x4, &(0x7f0000000cc0)})

21m59.68481253s ago: executing program 5 (id=502):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xf5) (async)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[@code={0xa, 0x84, {"00084078e00b81d200a0b8f2210180d2c20080d2630180d2240180d2020000d4007008d500c8217e0020400c000008d520ec9bd200c0b8f2a10080d2a20180d2830080d2a40180d2020000d400a8300ec05485d20000b0f2e10180d2220080d2e30080d2640080d2020000d4008008d5"}}, @eret={0xe6, 0x18, 0x10}, @msr={0x14, 0x20, {0x603000000013c2a6, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4, 0x200, 0x6}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x3, 0xe, 0x8, 0x8, 0x3}}, @uexit={0x0, 0x18, 0x1}, @hvc={0x32, 0x40, {0x86000000, [0x3e13, 0x951, 0x2, 0x8, 0x800]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x300, 0xff, 0xb}}, @svc={0x122, 0x40, {0x2c438c893e0be81, [0x100000000, 0x1, 0xffffffffffffffff, 0x1, 0x26b]}}, @mrs={0xbe, 0x18, {0x603000000013e667}}, @svc={0x122, 0x40, {0x84000012, [0x4, 0xfffffffffffffffd, 0x9, 0x1ff, 0x2000d5]}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3}}, @hvc={0x32, 0x40, {0x8400000c, [0x8000000000000001, 0x1ff, 0x2ddd, 0xbff, 0x6434]}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x149}}, @uexit={0x0, 0x18, 0x2000}], 0x2f4}, &(0x7f0000000080)=[@featur1={0x1, 0x66}], 0x1) (async)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010002e, &(0x7f0000000000)=0xec1}) (async)
r11 = mmap$KVM_VCPU(&(0x7f0000d5b000/0x1000)=nil, r6, 0xc, 0x11, r10, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
r15 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r14, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r16, 0x80086601, 0x20000000) (async)
r17 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r17, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_MMIO(r11, 0x20, &(0x7f0000000100)="ca11fc58b870fffc6379f7d1643c802f6ef7abd912aa4459", 0x0, 0x18)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) (async)
r18 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0)
r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r19, &(0x7f0000c00000/0x400000)=nil)

21m42.607155774s ago: executing program 5 (id=503):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r11, 0x4004ae8b, 0xffffffffffffffff)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4000ae84, &(0x7f0000000080)={{0x80a0000, 0xd000, 0xd, 0x4, 0x1, 0xc0, 0x0, 0x87, 0x75, 0x6, 0x3, 0x4}, {0xd000, 0x0, 0x3, 0x0, 0x4, 0xf, 0x1, 0x6, 0x2, 0x7, 0x1}, {0x6000, 0x0, 0x9, 0x2, 0x4, 0xd, 0xa6, 0x6, 0x2, 0x40, 0x0, 0x8}, {0x1000, 0x4, 0x1c, 0x1, 0x8, 0x9, 0x5, 0xc, 0x6, 0xb, 0xd, 0x81}, {0x2, 0x80a0000, 0x10, 0x8, 0x1, 0x7, 0x9, 0x6, 0x80, 0x4, 0x5a}, {0x4, 0x100000, 0xf, 0x4, 0xe, 0xfb, 0x8, 0x40, 0x9, 0x4, 0xad, 0x8}, {0x1000, 0xeeee0000, 0xa, 0x6, 0x8, 0x1, 0x4, 0x1, 0x6, 0x8, 0x0, 0x6}, {0xeeef0000, 0xd000, 0x3, 0xbf, 0x10, 0x47, 0x1, 0x0, 0xde, 0x9, 0x4, 0x4}, {0xeeef0000, 0x2}, {0xeeee0000, 0x6}, 0x40000, 0x0, 0x272bd4dbb75646f7, 0x8, 0x9, 0x2000, 0x100000, [0xffffffff, 0x9e, 0x100, 0x54e7cca3]})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000240)=@arm64_ccsidr={0x602000000011000d, &(0x7f0000000000)=0x66})
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
close(r12)

20m54.877384184s ago: executing program 37 (id=503):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r11, 0x4004ae8b, 0xffffffffffffffff)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4000ae84, &(0x7f0000000080)={{0x80a0000, 0xd000, 0xd, 0x4, 0x1, 0xc0, 0x0, 0x87, 0x75, 0x6, 0x3, 0x4}, {0xd000, 0x0, 0x3, 0x0, 0x4, 0xf, 0x1, 0x6, 0x2, 0x7, 0x1}, {0x6000, 0x0, 0x9, 0x2, 0x4, 0xd, 0xa6, 0x6, 0x2, 0x40, 0x0, 0x8}, {0x1000, 0x4, 0x1c, 0x1, 0x8, 0x9, 0x5, 0xc, 0x6, 0xb, 0xd, 0x81}, {0x2, 0x80a0000, 0x10, 0x8, 0x1, 0x7, 0x9, 0x6, 0x80, 0x4, 0x5a}, {0x4, 0x100000, 0xf, 0x4, 0xe, 0xfb, 0x8, 0x40, 0x9, 0x4, 0xad, 0x8}, {0x1000, 0xeeee0000, 0xa, 0x6, 0x8, 0x1, 0x4, 0x1, 0x6, 0x8, 0x0, 0x6}, {0xeeef0000, 0xd000, 0x3, 0xbf, 0x10, 0x47, 0x1, 0x0, 0xde, 0x9, 0x4, 0x4}, {0xeeef0000, 0x2}, {0xeeee0000, 0x6}, 0x40000, 0x0, 0x272bd4dbb75646f7, 0x8, 0x9, 0x2000, 0x100000, [0xffffffff, 0x9e, 0x100, 0x54e7cca3]})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000240)=@arm64_ccsidr={0x602000000011000d, &(0x7f0000000000)=0x66})
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
close(r12)

15m29.738941994s ago: executing program 6 (id=506):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x60800000001504bc, 0x0})
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000740)=[@irq_setup={0x46, 0x18, {0x2, 0xe5}}, @irq_setup={0x46, 0x18, {0x4, 0x35d}}, @hvc={0x32, 0x40, {0x20, [0x40, 0x81, 0x5, 0x80000001, 0x7fffffbfffffffff]}}, @svc={0x122, 0x40, {0x5000000, [0x5, 0xd4e9, 0x0, 0x6, 0x3]}}, @code={0xa, 0x84, {"0044200e60359cd200e0b0f2a10080d2020080d2830180d2240180d2020000d440fc97d200e0b0f2610180d2420080d2a30180d2440180d2020000d4000028d5000028d560ee93d20040b0f2e10180d2a20080d2a30180d2040180d2020000d40068203c000008d5007008d5007008d5"}}, @smc={0x1e, 0x40, {0xc4002011, [0x5, 0x8, 0x9, 0xe7, 0xa83941d]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x70, 0x9b}}, @irq_setup={0x46, 0x18, {0x3, 0x35f}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0xb20, 0x12, 0x6}}, @hvc={0x32, 0x40, {0xc4000001, [0x8, 0x9, 0x53f000000, 0x80000000, 0x8]}}, @svc={0x122, 0x40, {0x84000012, [0xc, 0x6a18, 0x6, 0x1, 0x9]}}, @svc={0x122, 0x40, {0xc4000012, [0x10, 0x400, 0x3, 0xe, 0x5]}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x2fc}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x80, 0x7, 0x2}}, @svc={0x122, 0x40, {0x84000001, [0x8, 0x40, 0x6, 0x8, 0x6]}}, @uexit={0x0, 0x18, 0xd}, @smc={0x1e, 0x40, {0x8400000a, [0xb, 0x7, 0x7, 0x1, 0x1]}}, @irq_setup={0x46, 0x18, {0x0, 0x4f}}, @msr={0x14, 0x20, {0x603000000013f088, 0x800000008c}}, @eret={0xe6, 0x18, 0xffffffffffffff80}, @hvc={0x32, 0x40, {0x2, [0x9, 0x3, 0x8, 0x220, 0x101]}}, @eret={0xe6, 0x18, 0x2a}, @eret={0xe6, 0x18, 0x67}], 0x45c}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x4}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x0, 0x7, &(0x7f0000000280)=0x6})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000080), 0x80080, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000100)={0x6, <r15=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f00000002c0)=0x8000000})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000000)=0x400000080a0000})
r16 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c)
syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}})
ioctl$KVM_SIGNAL_MSI(r16, 0x4020aea5, &(0x7f0000000000)={0xdddd1000, 0xdddd0000, 0x6, 0x1, 0x4})

15m6.587716344s ago: executing program 6 (id=507):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$KVM_CREATE_VM(r5, 0x80086601, 0x20000008)

14m52.461275282s ago: executing program 6 (id=508):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x2000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x2000, 0x4000})
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000440)={0x0, &(0x7f0000000080)=[@hvc={0x32, 0x40, {0xc5000020, [0xd, 0x2, 0x6, 0x7, 0x2]}}, @irq_setup={0x46, 0x18, {0x4, 0x157}}, @svc={0x122, 0x40, {0xc5000021, [0x2, 0x43c, 0x5, 0x2, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x4, 0x1, 0x8, 0x800, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x153}}, @irq_setup={0x46, 0x18, {0x3, 0x1fc}}, @smc={0x1e, 0x40, {0x84000004, [0x100000000, 0x6, 0x30000000, 0x5, 0x8]}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0xe22, 0x3, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c601}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x2f0}}, @mrs={0xbe, 0x18, {0x603000000013df6d}}, @msr={0x14, 0x20, {0x603000000013c014, 0xa60a}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x1f0}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x374}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x8, 0x4, 0x200, 0x3}}, @irq_setup={0x46, 0x18, {0x1, 0x2c2}}, @irq_setup={0x46, 0x18, {0x3, 0x2e6}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x138}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0x0, 0x8, 0x48ef, 0x3}}, @memwrite={0x6e, 0x30, @generic={0x8086000, 0x6fe, 0x1ff}}, @mrs={0xbe, 0x18, {0x603000000013c518}}, @hvc={0x32, 0x40, {0x4000, [0x6, 0x40, 0x9, 0x800, 0x4]}}, @eret={0xe6, 0x18, 0x3}, @eret={0xe6, 0x18}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xffe8, 0x65048ef9}}], 0x3b8}, &(0x7f0000000480)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000004c0)=@x86={0x45, 0xd, 0x5, 0x0, 0x6, 0x80, 0x7, 0x2, 0x4, 0x3, 0x92, 0x4, 0x0, 0x4, 0x4, 0xa1, 0xd, 0x3, 0x4c, '\x00', 0xe, 0x1ff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000500)={0xa, 0x18})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
syz_kvm_setup_cpu$arm64(r4, r2, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000a80)=[{0x0, &(0x7f0000000540)=[@smc={0x1e, 0x40, {0x6000000, [0xea, 0x8, 0x1, 0x7ff, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x7, 0xae, 0xfff, 0x4}}, @eret={0xe6, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x0, 0x1c9}}, @svc={0x122, 0x40, {0x3000000, [0x8001, 0x2, 0xe, 0x7fff, 0xa]}}, @irq_setup={0x46, 0x18, {0x1, 0x209}}, @hvc={0x32, 0x40, {0x1, [0x2, 0x2, 0x101, 0x3ff, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0xcb}}, @code={0xa, 0xb4, {"a01f9fd200e0b8f2410180d2e20180d2c30080d2240180d2020000d4007008d5e08f96d200c0b8f2610180d2420180d2030180d2240080d2020000d4000008d5008008d520c99ed20020b0f2410080d2c20180d2030080d2e40180d2020000d4008008d500988ad20040b8f2210180d2620180d2a30180d2a40080d2020000d4000028d5c04c8cd20080b8f2a10180d2c20180d2c30080d2840080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x0, 0xb}}, @smc={0x1e, 0x40, {0x400, [0x5, 0x7, 0xae, 0x10001, 0x7a81]}}, @eret={0xe6, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x2d8}}, @msr={0x14, 0x20, {0x603000000013d921}}, @uexit={0x0, 0x18, 0xfa}, @mrs={0xbe, 0x18, {0x603000000013f099}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x4, 0x7, 0x3, 0x1ff, 0x1}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x289}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x400}}, @irq_setup={0x46, 0x18, {0x3, 0x2a0}}, @msr={0x14, 0x20, {0x603000000013800d, 0x2}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x34c}}, @hvc={0x32, 0x40, {0xc4000003, [0x6, 0x8, 0x6, 0x6, 0xfffffffffffffffa]}}, @mrs={0xbe, 0x18, {0x603000000013e6ca}}, @irq_setup={0x46, 0x18, {0x0, 0x182}}, @uexit={0x0, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x78}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x1, 0xf, 0xda9, 0x40, 0x4}}, @svc={0x122, 0x40, {0x84000098, [0x2, 0xb, 0x6, 0x3, 0x60]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xfc28, 0x7, 0x8}}], 0x52c}], 0x1, 0x0, &(0x7f0000000ac0)=[@featur1={0x1, 0x62}], 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000b00)={0x6a70000000000000, 0x79})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x200040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3d)
r7 = eventfd2(0x6, 0x40001)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000b80)={0x7fff, 0x1, 0x1, r7, 0x4})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000c00)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000bc0)={0x9, 0x3529, 0x1}})
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000000c40)={0xa, 0x3, 0x42c0})
r9 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x810, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000c80)="4648558aa06f6d1cae147f62ed9c7a89abb34c418a414dc37b6c2dba8c315171e6cb39d5101757f56bd4ae656cc27a71b7bdf6d85e08e4fa586650e07bcf6f21f382bdc879fcb58c", 0x0, 0x48)
ioctl$KVM_CAP_ARM_MTE(r4, 0x4068aea3, &(0x7f0000000d00))
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000d80)={0x8, 0xffffffffffffffff, 0x1})
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000dc0)={0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000e00)={0x4, 0x0, 0x1000, 0x1000, &(0x7f0000fd6000/0x1000)=nil})
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000e40))
r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32)
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000ec0)={0x100000001, 0x8000000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r11, 0x40a0ae49, &(0x7f0000000f00)={0x4, 0x1, 0x8000000, 0x1000, &(0x7f0000faf000/0x1000)=nil, 0x6, r12})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

14m39.178818173s ago: executing program 6 (id=509):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x6, 0x60)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x5, 0x2, &(0x7f0000000080)=0x1})

14m25.553808259s ago: executing program 6 (id=510):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5})
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x8, 0x40, &(0x7f0000000140)=0x2})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

14m3.668793558s ago: executing program 6 (id=511):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x0, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x141501, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x5)
r11 = ioctl$KVM_CREATE_VM(r9, 0x894c, 0x0)
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x32)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x2})
r13 = ioctl$KVM_CREATE_VCPU(r11, 0xb701, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xb701, 0xfffffffffffffffe)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r14, 0x2, 0x1000000000000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1fc)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x2)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

13m44.959198809s ago: executing program 7 (id=504):
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x2132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000006, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)

13m33.763589885s ago: executing program 7 (id=512):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000080)=@arm64_sve={0x6080000000150060, 0x0})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

13m12.125176798s ago: executing program 38 (id=511):
r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x0, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x141501, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x5)
r11 = ioctl$KVM_CREATE_VM(r9, 0x894c, 0x0)
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x32)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000000)={0x2})
r13 = ioctl$KVM_CREATE_VCPU(r11, 0xb701, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xb701, 0xfffffffffffffffe)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r14, 0x2, 0x1000000000000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1fc)
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x2)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5)

12m45.518716704s ago: executing program 39 (id=512):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000080)=@arm64_sve={0x6080000000150060, 0x0})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

2m40.521083625s ago: executing program 8 (id=521):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0x401054d6, 0x1)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

2m40.168577424s ago: executing program 9 (id=522):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x400881, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x46) (async, rerun: 32)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x2, 0x79}) (rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)

2m27.297720089s ago: executing program 8 (id=523):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8})
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0xbd6d756adc22f15c, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1})
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x6030000000138010}}], 0x18}, 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r11, 0xffffffffffffffff)
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000000)=@attr_other={0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000080)=0x8})

2m25.650265912s ago: executing program 9 (id=524):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x25c0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0xb, 0x30d2a4fbfbfad6b8, 0xffffffffffffffff, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x1000, &(0x7f0000c42000/0x1000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)

2m6.440301515s ago: executing program 9 (id=525):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
close(r2)
mmap$KVM_VCPU(&(0x7f0000eb0000/0x3000)=nil, 0x930, 0x2000007, 0x4010, r2, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

2m3.85522892s ago: executing program 8 (id=526):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x101300, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000280)=0x400000080a0000})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000c1e000/0x4000)=nil})
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000002c0)={0xa})
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xe4)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m49.905451059s ago: executing program 9 (id=527):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0xdddd1000, 0x1000})
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
eventfd2(0xfffffffe, 0x1)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)

1m39.058035135s ago: executing program 8 (id=528):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x1, 0x3, 0x0, 0x1, 0x7, 0x37, 0x6, 0x45, 0xd, 0xbe, 0x60, 0x0, 0x2, 0x8, 0x0, 0x7, 0x0, 0xd5, '\x00', 0x5, 0x1}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x1, 0x3, 0x0, 0x1, 0x7, 0x37, 0x6, 0x45, 0xd, 0xbe, 0x60, 0x0, 0x2, 0x8, 0x0, 0x7, 0x0, 0xd5, '\x00', 0x5, 0x1})

1m22.938512669s ago: executing program 9 (id=529):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181a40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013c4f2}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r9, 0x4068aea3, &(0x7f00000000c0))
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0xc400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
syz_kvm_vgic_v3_setup(r9, 0x3, 0xc0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x25)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000240)=@arm64_fp={0x60400000001000c8, &(0x7f0000000040)=0x8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000100)="4bead90a8a524c79f126541ba60686d7378e2f7235828bcf3fa4a80d5e3c6753e0fbf42973da38e59cd4b2dc174f7f7ed37dd8abc6a52715ea2d8a070028857f943eed4506eaf7a1", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x151400, 0x0)

1m21.085434833s ago: executing program 8 (id=530):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43)
ioctl$KVM_CREATE_VM(r1, 0x40086602, 0x20000000)
munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x3, 0x4, 0x0})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r8, 0x40000)
syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000180)={0x6, 0x80a0000, 0x4, r0, 0x8})
r13 = syz_kvm_vgic_v3_setup(r10, 0x3, 0xa0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x7, 0x4b6, 0x0})
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x1, 0x5, &(0x7f00000001c0)=0x4})
eventfd2(0x0, 0x0)
eventfd2(0x0, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22300, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x13000})
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)

56.489939295s ago: executing program 9 (id=531):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r5, 0x3, 0x40b2811, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000a1e000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffffc9)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100004, &(0x7f00000000c0)=0x80003fe})
ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000000))
r9 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c7f000/0x2000)=nil, 0x930, 0x0, 0x80010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r14, 0x4018aee3, 0x0)
r15 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r16 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r17, 0xae01, 0x25)

50.685112492s ago: executing program 8 (id=532):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

6.302769431s ago: executing program 40 (id=531):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r5, 0x3, 0x40b2811, r4, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000a1e000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffffc9)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100004, &(0x7f00000000c0)=0x80003fe})
ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000000))
r9 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c7f000/0x2000)=nil, 0x930, 0x0, 0x80010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r14, 0x4018aee3, 0x0)
r15 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r16 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r17, 0xae01, 0x25)

0s ago: executing program 41 (id=532):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

kernel console output (not intermixed with test programs):

[  379.529973][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.145235][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:64209' (ED25519) to the list of known hosts.
[  589.596841][   T25] audit: type=1400 audit(588.810:60): avc:  denied  { name_bind } for  pid=3322 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  590.453280][   T25] audit: type=1400 audit(589.660:61): avc:  denied  { execute } for  pid=3323 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  590.482739][   T25] audit: type=1400 audit(589.690:62): avc:  denied  { execute_no_trans } for  pid=3323 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  613.041959][   T25] audit: type=1400 audit(612.250:63): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  613.115909][   T25] audit: type=1400 audit(612.310:64): avc:  denied  { mount } for  pid=3323 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  613.202688][ T3323] cgroup: Unknown subsys name 'net'
[  613.271803][   T25] audit: type=1400 audit(612.490:65): avc:  denied  { unmount } for  pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  613.753807][ T3323] cgroup: Unknown subsys name 'cpuset'
[  613.890540][ T3323] cgroup: Unknown subsys name 'rlimit'
[  614.838791][   T25] audit: type=1400 audit(614.040:66): avc:  denied  { setattr } for  pid=3323 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  614.840036][   T25] audit: type=1400 audit(614.050:67): avc:  denied  { mounton } for  pid=3323 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  614.873710][   T25] audit: type=1400 audit(614.090:68): avc:  denied  { mount } for  pid=3323 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  615.955864][ T3327] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  615.975913][   T25] audit: type=1400 audit(615.190:69): avc:  denied  { relabelto } for  pid=3327 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  615.996458][   T25] audit: type=1400 audit(615.210:70): avc:  denied  { write } for  pid=3327 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  616.164636][   T25] audit: type=1400 audit(615.380:71): avc:  denied  { read } for  pid=3323 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  616.182686][   T25] audit: type=1400 audit(615.390:72): avc:  denied  { open } for  pid=3323 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  616.230827][ T3323] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  667.931134][   T25] audit: type=1400 audit(667.120:73): avc:  denied  { execmem } for  pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  672.169974][   T25] audit: type=1400 audit(671.380:74): avc:  denied  { read } for  pid=3330 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  672.202318][   T25] audit: type=1400 audit(671.420:75): avc:  denied  { open } for  pid=3330 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  672.275808][   T25] audit: type=1400 audit(671.490:76): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  672.572727][   T25] audit: type=1400 audit(671.770:77): avc:  denied  { module_request } for  pid=3330 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  673.516940][   T25] audit: type=1400 audit(672.730:78): avc:  denied  { sys_module } for  pid=3330 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  695.200243][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.669874][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.790629][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.333732][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.495743][ T3330] hsr_slave_0: entered promiscuous mode
[  711.524590][ T3330] hsr_slave_1: entered promiscuous mode
[  712.551075][ T3331] hsr_slave_0: entered promiscuous mode
[  712.589319][ T3331] hsr_slave_1: entered promiscuous mode
[  712.616122][ T3331] debugfs: 'hsr0' already exists in 'hsr'
[  712.622929][ T3331] Cannot create hsr debugfs directory
[  717.869720][   T25] audit: type=1400 audit(717.080:79): avc:  denied  { create } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.931649][   T25] audit: type=1400 audit(717.150:80): avc:  denied  { write } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  717.964573][   T25] audit: type=1400 audit(717.170:81): avc:  denied  { read } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  718.139437][ T3330] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  718.435984][ T3330] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  718.666358][ T3330] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  719.162517][ T3330] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  720.649748][ T3331] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  720.862429][ T3331] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  721.032423][ T3331] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  721.193788][ T3331] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  732.311354][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0
[  734.636863][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.011230][ T3330] veth0_vlan: entered promiscuous mode
[  785.404315][ T3330] veth1_vlan: entered promiscuous mode
[  787.074044][ T3331] veth0_vlan: entered promiscuous mode
[  787.690676][ T3330] veth0_macvtap: entered promiscuous mode
[  787.933314][ T3331] veth1_vlan: entered promiscuous mode
[  788.184009][ T3330] veth1_macvtap: entered promiscuous mode
[  790.402785][ T3331] veth0_macvtap: entered promiscuous mode
[  790.474478][ T3383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.551375][ T3383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.555367][ T3383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.579887][ T3383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  790.968639][ T3331] veth1_macvtap: entered promiscuous mode
[  793.139989][   T25] audit: type=1400 audit(792.300:82): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  793.322139][   T25] audit: type=1400 audit(792.530:83): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.vPriva/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  793.541425][   T25] audit: type=1400 audit(792.750:84): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  793.837231][   T25] audit: type=1400 audit(793.050:85): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.vPriva/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  793.928995][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.932974][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.960311][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.966117][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.016948][   T25] audit: type=1400 audit(793.230:86): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/syzkaller.vPriva/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  794.915946][   T25] audit: type=1400 audit(794.130:87): avc:  denied  { unmount } for  pid=3330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  795.136547][   T25] audit: type=1400 audit(794.350:88): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  795.255051][   T25] audit: type=1400 audit(794.470:89): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="gadgetfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  795.541965][   T25] audit: type=1400 audit(794.760:90): avc:  denied  { mount } for  pid=3330 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  795.656478][   T25] audit: type=1400 audit(794.870:91): avc:  denied  { mounton } for  pid=3330 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  797.153985][ T3330] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  798.750436][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  798.762745][   T25] audit: type=1400 audit(797.940:93): avc:  denied  { read write } for  pid=3330 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  798.819692][   T25] audit: type=1400 audit(797.990:94): avc:  denied  { open } for  pid=3330 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  798.836721][   T25] audit: type=1400 audit(798.040:95): avc:  denied  { ioctl } for  pid=3330 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  810.065401][   T25] audit: type=1400 audit(809.260:96): avc:  denied  { read write } for  pid=3483 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  810.134969][   T25] audit: type=1400 audit(809.350:97): avc:  denied  { open } for  pid=3483 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  810.283261][   T25] audit: type=1400 audit(809.500:98): avc:  denied  { ioctl } for  pid=3483 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  829.276166][   T25] audit: type=1400 audit(828.420:99): avc:  denied  { execute } for  pid=3502 comm="syz.0.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  856.182177][   T25] audit: type=1400 audit(855.370:100): avc:  denied  { append } for  pid=3521 comm="syz.0.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  861.836078][   T25] audit: type=1400 audit(861.050:101): avc:  denied  { ioctl } for  pid=3526 comm="syz.1.12" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  894.749277][   T25] audit: type=1400 audit(893.940:102): avc:  denied  { create } for  pid=3545 comm="syz.0.19" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1019.841584][ T3632] kvm [3632]: Failed to find VMA for hva 0x20c01000
[ 1227.112927][ T3765] kvm [3765]: Failed to find VMA for hva 0x21016000
[ 1314.423915][ T3819] kvm [3819]: Failed to find VMA for hva 0x20d52000
[ 1362.002577][   T25] audit: type=1400 audit(1361.220:103): avc:  denied  { map } for  pid=3855 comm="syz.1.113" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=9666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1362.045638][   T25] audit: type=1400 audit(1361.260:104): avc:  denied  { read } for  pid=3855 comm="syz.1.113" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=9666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1420.993445][   T25] audit: type=1400 audit(1420.200:105): avc:  denied  { setattr } for  pid=3878 comm="syz.0.119" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1427.112542][ T3882] kvm [3882]: Failed to find VMA for hva 0x20dc9000
[ 2018.596788][ T4275] kvm [4275]: Failed to find VMA for hva 0x20c01000
[ 2207.289976][ T4396] kvm [4396]: Failed to find VMA for hva 0x21016000
[ 2218.100532][   T25] audit: type=1400 audit(2217.300:106): avc:  denied  { map } for  pid=4403 comm="syz.1.282" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2360.383794][ T4508] kvm [4508]: Failed to find VMA for hva 0x20c01000
[ 2464.832744][ T4582] kvm [4582]: Failed to find VMA for hva 0x21016000
[ 2792.249301][   T25] audit: type=1400 audit(2791.450:107): avc:  denied  { execute } for  pid=4791 comm="syz.0.399" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 2865.485337][ T4836] kvm [4836]: Failed to find VMA for hva 0x21016000
[ 3069.765694][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3071.270545][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3073.455315][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3074.565076][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3086.651957][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3086.811454][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3086.896863][   T51] bond0 (unregistering): Released all slaves
[ 3088.291778][   T51] hsr_slave_0: left promiscuous mode
[ 3088.431764][   T51] hsr_slave_1: left promiscuous mode
[ 3088.823952][   T51] veth1_macvtap: left promiscuous mode
[ 3088.851664][   T51] veth0_macvtap: left promiscuous mode
[ 3088.856962][   T51] veth1_vlan: left promiscuous mode
[ 3088.882942][   T51] veth0_vlan: left promiscuous mode
[ 3105.870806][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3106.639794][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3107.412823][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3108.936440][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3126.314489][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3126.436238][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3126.527063][   T51] bond0 (unregistering): Released all slaves
[ 3128.120072][   T51] hsr_slave_0: left promiscuous mode
[ 3128.290555][   T51] hsr_slave_1: left promiscuous mode
[ 3128.601228][   T51] veth1_macvtap: left promiscuous mode
[ 3128.604548][   T51] veth0_macvtap: left promiscuous mode
[ 3128.640039][   T51] veth1_vlan: left promiscuous mode
[ 3128.644180][   T51] veth0_vlan: left promiscuous mode
[ 3153.726526][ T4923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3154.242306][ T4923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3162.750515][ T4929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3163.372534][ T4929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3173.633866][ T4923] hsr_slave_0: entered promiscuous mode
[ 3173.717112][ T4923] hsr_slave_1: entered promiscuous mode
[ 3187.138489][ T4929] hsr_slave_0: entered promiscuous mode
[ 3187.169529][ T4929] hsr_slave_1: entered promiscuous mode
[ 3187.189568][ T4929] debugfs: 'hsr0' already exists in 'hsr'
[ 3187.193565][ T4929] Cannot create hsr debugfs directory
[ 3189.827188][ T4923] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3190.156364][ T4923] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3191.104115][ T4923] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3191.609483][ T4923] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3199.726730][ T4929] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3200.123293][ T4929] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3200.416309][ T4929] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3200.702794][ T4929] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3214.444589][ T4923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3221.472986][ T4929] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3301.916892][ T4923] veth0_vlan: entered promiscuous mode
[ 3302.840256][ T4923] veth1_vlan: entered promiscuous mode
[ 3306.014015][ T4923] veth0_macvtap: entered promiscuous mode
[ 3306.556585][ T4923] veth1_macvtap: entered promiscuous mode
[ 3309.774927][ T4885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3309.801197][ T4885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3309.859020][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3309.860074][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3313.642717][ T4929] veth0_vlan: entered promiscuous mode
[ 3315.442366][ T4929] veth1_vlan: entered promiscuous mode
[ 3319.515336][ T4929] veth0_macvtap: entered promiscuous mode
[ 3320.061913][ T4929] veth1_macvtap: entered promiscuous mode
[ 3323.949474][ T3378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3323.959259][ T3378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.068839][ T3378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.069945][ T3378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3463.941420][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3464.275577][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3478.302029][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3478.785158][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3503.670733][ T5178] hsr_slave_0: entered promiscuous mode
[ 3503.762889][ T5178] hsr_slave_1: entered promiscuous mode
[ 3503.920007][ T5178] debugfs: 'hsr0' already exists in 'hsr'
[ 3503.930298][ T5178] Cannot create hsr debugfs directory
[ 3517.324461][ T5186] hsr_slave_0: entered promiscuous mode
[ 3517.435050][ T5186] hsr_slave_1: entered promiscuous mode
[ 3517.483180][ T5186] debugfs: 'hsr0' already exists in 'hsr'
[ 3517.486279][ T5186] Cannot create hsr debugfs directory
[ 3527.799718][ T5178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3528.950722][ T5178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3529.301175][ T5178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3530.739539][ T5178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3545.594730][ T5186] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 3546.282782][ T5186] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 3546.925550][ T5186] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 3547.535626][ T5186] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 3575.889236][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3585.583022][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3671.546716][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3673.285121][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3674.696286][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3676.291812][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3696.546427][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3696.683684][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3696.792475][   T12] bond0 (unregistering): Released all slaves
[ 3698.892802][   T12] hsr_slave_0: left promiscuous mode
[ 3699.006549][   T12] hsr_slave_1: left promiscuous mode
[ 3700.167190][   T12] veth1_macvtap: left promiscuous mode
[ 3700.221922][   T12] veth0_macvtap: left promiscuous mode
[ 3700.235265][   T12] veth1_vlan: left promiscuous mode
[ 3700.264187][   T12] veth0_vlan: left promiscuous mode
[ 3731.373285][ T4581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3733.461508][ T4581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3735.283532][ T4581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3736.883963][ T4581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3757.637209][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3757.753495][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3757.822299][ T4581] bond0 (unregistering): Released all slaves
[ 3760.359111][ T4581] hsr_slave_0: left promiscuous mode
[ 3760.810283][ T4581] hsr_slave_1: left promiscuous mode
[ 3761.782813][ T4581] veth1_macvtap: left promiscuous mode
[ 3761.794513][ T4581] veth0_macvtap: left promiscuous mode
[ 3761.805089][ T4581] veth1_vlan: left promiscuous mode
[ 3761.839397][ T4581] veth0_vlan: left promiscuous mode
[ 3794.795484][ T5178] veth0_vlan: entered promiscuous mode
[ 3795.132584][ T5186] veth0_vlan: entered promiscuous mode
[ 3796.314976][ T5178] veth1_vlan: entered promiscuous mode
[ 3796.686890][ T5186] veth1_vlan: entered promiscuous mode
[ 3800.552577][ T5178] veth0_macvtap: entered promiscuous mode
[ 3800.741492][ T5186] veth0_macvtap: entered promiscuous mode
[ 3801.388162][ T5178] veth1_macvtap: entered promiscuous mode
[ 3801.881433][ T5186] veth1_macvtap: entered promiscuous mode
[ 3805.791379][ T4352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3805.804062][ T4352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3805.853202][ T4352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3805.864941][ T4352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3806.680117][ T3383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3806.711319][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3806.713246][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3806.714104][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4260.565533][ T5334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4263.983413][ T5334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4266.325496][ T5334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4268.585452][ T5334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4299.259312][ T5334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4299.686795][ T5334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4299.941923][ T5334] bond0 (unregistering): Released all slaves
[ 4302.700681][ T5334] hsr_slave_0: left promiscuous mode
[ 4302.824009][ T5334] hsr_slave_1: left promiscuous mode
[ 4303.573772][ T5334] veth1_macvtap: left promiscuous mode
[ 4303.591472][ T5334] veth0_macvtap: left promiscuous mode
[ 4303.601088][ T5334] veth1_vlan: left promiscuous mode
[ 4303.611062][ T5334] veth0_vlan: left promiscuous mode
[ 4409.512439][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4409.879666][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4444.945626][ T5682] hsr_slave_0: entered promiscuous mode
[ 4445.242871][ T5682] hsr_slave_1: entered promiscuous mode
[ 4457.210862][ T4885] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4459.556063][ T4885] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4461.301568][ T4885] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4462.667274][ T4885] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4487.736591][ T4885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4488.089985][ T4885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4488.281044][ T4885] bond0 (unregistering): Released all slaves
[ 4490.840018][ T4885] hsr_slave_0: left promiscuous mode
[ 4490.909956][ T4885] hsr_slave_1: left promiscuous mode
[ 4491.524727][ T4885] veth1_macvtap: left promiscuous mode
[ 4491.560465][ T4885] veth0_macvtap: left promiscuous mode
[ 4491.573774][ T4885] veth1_vlan: left promiscuous mode
[ 4491.585011][ T4885] veth0_vlan: left promiscuous mode
[ 4521.995466][ T5682] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 4523.146997][ T5682] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 4523.828915][ T5682] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 4524.510124][ T5682] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 4554.443503][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4568.857129][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4569.250868][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4603.685831][ T5790] hsr_slave_0: entered promiscuous mode
[ 4603.802190][ T5790] hsr_slave_1: entered promiscuous mode
[ 4603.923735][ T5790] debugfs: 'hsr0' already exists in 'hsr'
[ 4603.928405][ T5790] Cannot create hsr debugfs directory
[ 4623.914138][ T5790] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 4624.666502][ T5790] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 4625.223625][ T5790] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 4625.819962][ T5790] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 4659.243129][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4693.673176][ T5682] veth0_vlan: entered promiscuous mode
[ 4694.755364][ T5682] veth1_vlan: entered promiscuous mode
[ 4698.774094][ T5682] veth0_macvtap: entered promiscuous mode
[ 4699.405170][ T5682] veth1_macvtap: entered promiscuous mode
[ 4703.585520][ T4581] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4703.589026][ T4581] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4703.620262][ T5692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4703.894240][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4837.664022][ T5790] veth0_vlan: entered promiscuous mode
[ 4839.271513][ T5790] veth1_vlan: entered promiscuous mode
[ 4844.470083][ T5790] veth0_macvtap: entered promiscuous mode
[ 4845.182567][ T5790] veth1_macvtap: entered promiscuous mode
[ 4849.960718][   T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4849.972876][   T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4850.019226][   T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4850.053361][   T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5007.176128][ T5692] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5009.370050][ T5692] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5011.411094][ T5692] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5014.806720][ T5692] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5047.846157][ T5692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5048.175397][ T5692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5048.411734][ T5692] bond0 (unregistering): Released all slaves
[ 5051.791301][ T5692] hsr_slave_0: left promiscuous mode
[ 5051.855290][ T5692] hsr_slave_1: left promiscuous mode
[ 5052.422133][ T5692] veth1_macvtap: left promiscuous mode
[ 5052.436533][ T5692] veth0_macvtap: left promiscuous mode
[ 5052.455731][ T5692] veth1_vlan: left promiscuous mode
[ 5052.501674][ T5692] veth0_vlan: left promiscuous mode
[ 5078.043935][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5078.485542][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5083.366429][ T3383] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5085.280152][ T3383] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5087.915104][ T3383] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5089.503622][ T3383] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5121.778994][ T3383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5122.220629][ T3383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5122.431219][ T3383] bond0 (unregistering): Released all slaves
[ 5124.843251][ T3383] hsr_slave_0: left promiscuous mode
[ 5124.969558][ T3383] hsr_slave_1: left promiscuous mode
[ 5125.724447][ T3383] veth1_macvtap: left promiscuous mode
[ 5125.772300][ T3383] veth0_macvtap: left promiscuous mode
[ 5125.775403][ T3383] veth1_vlan: left promiscuous mode
[ 5125.812870][ T3383] veth0_vlan: left promiscuous mode
[ 5149.856529][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5150.312209][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5153.844788][ T6044] hsr_slave_0: entered promiscuous mode
[ 5153.973387][ T6044] hsr_slave_1: entered promiscuous mode
[ 5177.386289][ T6044] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 5178.056205][ T6044] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 5178.654539][ T6044] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 5179.143647][ T6044] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 5193.582243][ T6059] hsr_slave_0: entered promiscuous mode
[ 5193.675107][ T6059] hsr_slave_1: entered promiscuous mode
[ 5193.855551][ T6059] debugfs: 'hsr0' already exists in 'hsr'
[ 5193.884861][ T6059] Cannot create hsr debugfs directory
[ 5215.185392][ T6059] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5215.756848][ T6059] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5216.601480][ T6059] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5217.409519][ T6059] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5218.632001][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5263.155914][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5391.195152][ T6044] veth0_vlan: entered promiscuous mode
[ 5392.395000][ T6044] veth1_vlan: entered promiscuous mode
[ 5396.265625][ T6044] veth0_macvtap: entered promiscuous mode
[ 5397.116079][ T6044] veth1_macvtap: entered promiscuous mode
[ 5403.229435][   T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.241638][ T4352] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.242495][ T4352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5403.243230][ T4352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5437.570202][ T6059] veth0_vlan: entered promiscuous mode
[ 5439.540783][ T6059] veth1_vlan: entered promiscuous mode
[ 5445.014553][ T6059] veth0_macvtap: entered promiscuous mode
[ 5446.201666][ T6059] veth1_macvtap: entered promiscuous mode
[ 5452.370715][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5452.403041][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5452.593507][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5452.829367][ T3383] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5860.170505][ T6415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5860.785608][ T6415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5868.463578][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5869.101174][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5919.306753][ T6415] hsr_slave_0: entered promiscuous mode
[ 5919.542610][ T6415] hsr_slave_1: entered promiscuous mode
[ 5919.721028][ T6415] debugfs: 'hsr0' already exists in 'hsr'
[ 5919.728557][ T6415] Cannot create hsr debugfs directory
[ 5928.115001][ T6417] hsr_slave_0: entered promiscuous mode
[ 5928.274264][ T6417] hsr_slave_1: entered promiscuous mode
[ 5928.483610][ T6417] debugfs: 'hsr0' already exists in 'hsr'
[ 5928.533981][ T6417] Cannot create hsr debugfs directory
[ 5995.991521][ T6415] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 5997.459391][ T6415] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 5998.613329][ T6415] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 6001.041094][ T6415] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 6009.271137][ T6417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 6009.854094][ T6417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 6010.974735][ T6417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 6011.861410][ T6417] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 6057.242462][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6066.496809][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6101.121461][   T27] INFO: task syz.9.531:6393 blocked for more than 430 seconds.
[ 6101.203609][   T27]       Not tainted syzkaller #0
[ 6101.232537][   T27]       Blocked by coredump.
[ 6101.241158][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6101.241861][   T27] task:syz.9.531       state:D stack:0     pid:6393  tgid:6392  ppid:6059   task_flags:0x40044c flags:0x00000019
[ 6101.243397][   T27] Call trace:
[ 6101.243917][   T27]  __switch_to+0x584/0xb20 (T)
[ 6101.245980][   T27]  __schedule+0x1eec/0x33a4
[ 6101.246549][   T27]  schedule+0xac/0x27c
[ 6101.247038][   T27]  schedule_timeout+0x5c/0x1e4
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6101.368771][   T27]  do_wait_for_common+0x28c/0x444
[ 6101.369427][   T27]  wait_for_completion+0x44/0x5c
[ 6101.369930][   T27]  __synchronize_srcu+0x2a4/0x320
[ 6101.370469][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 6101.370970][   T27]  __mmu_notifier_release+0x424/0x614
[ 6101.371397][   T27]  exit_mmap+0xbc/0xbbc
[ 6101.371843][   T27]  __mmput+0x10c/0x530
[ 6101.372313][   T27]  mmput+0x70/0xac
[ 6101.372788][   T27]  exit_mm+0x158/0x258
[ 6101.373228][   T27]  do_exit+0x788/0x2378
[ 6101.373673][   T27]  do_group_exit+0x1d4/0x2ac
[ 6101.374134][   T27]  get_signal+0x1440/0x1554
[ 6101.374654][   T27]  arch_do_signal_or_restart+0x23c/0x4d98
[ 6101.375164][   T27]  exit_to_user_mode_loop+0x7c/0x178
[ 6101.375577][   T27]  el0_svc+0x170/0x234
[ 6101.376085][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 6101.376560][   T27]  el0t_64_sync+0x198/0x19c
[ 6101.614538][   T27] 
[ 6101.614538][   T27] Showing all locks held in the system:
[ 6101.666751][   T27] 3 locks held by kworker/u4:0/12:
[ 6101.678957][   T27] 1 lock held by khungtaskd/27:
[ 6101.679446][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 6101.681885][   T27] 2 locks held by getty/3195:
[ 6101.682272][   T27]  #0: 36f00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6101.683991][   T27]  #1: 2fff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 6101.685665][   T27] 2 locks held by syz-executor/3323:
[ 6101.685998][   T27] 2 locks held by kworker/u4:2/3378:
[ 6101.686312][   T27]  #0: c4f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6101.840585][   T27]  #1: ffff8000a3c67c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6101.842278][   T27] 2 locks held by kworker/u4:6/3383:
[ 6101.842629][   T27]  #0: c4f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6101.844219][   T27]  #1: ffff8000a3ca7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6101.845802][   T27] 3 locks held by kworker/0:6/5145:
[ 6101.846146][   T27] 3 locks held by kworker/u4:12/5334:
[ 6101.846505][   T27] 3 locks held by kworker/u4:9/5689:
[ 6101.846844][   T27] 3 locks held by kworker/u4:10/5692:
[ 6101.847154][   T27] 2 locks held by kworker/u4:13/5901:
[ 6102.003328][   T27] 3 locks held by kworker/u4:14/6115:
[ 6102.003848][   T27] 2 locks held by syz.8.532/6400:
[ 6102.004180][   T27] 1 lock held by syz-executor/6415:
[ 6102.004470][   T27]  #0: ffff800087c7a2c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[ 6102.006190][   T27] 3 locks held by kworker/u4:15/6433:
[ 6102.006552][   T27] 1 lock held by modprobe/6577:
[ 6102.006882][   T27] 1 lock held by modprobe/6578:
[ 6102.100393][   T27] 
[ 6102.101048][   T27] =============================================
[ 6102.101048][   T27]