last executing test programs:

58m7.088594977s ago: executing program 32 (id=215):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)

57m59.7494466s ago: executing program 33 (id=216):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000)
write$eventfd(r7, &(0x7f0000000040), 0x8)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000100)=@arm64_sve={0x608000000015039c, &(0x7f0000000180)=0x315})
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000d8a000/0x4000)=nil})
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r9 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000000)=0xd})
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x664b7dee, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000200)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000c85000/0x2000)=nil, 0x200})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010000a, &(0x7f0000000000)=0x4})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

52m35.318307931s ago: executing program 3 (id=226):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x8, 0x8, 0x2}}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xd4}, 0x0, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c024, &(0x7f00000000c0)})

52m21.719710359s ago: executing program 3 (id=227):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0x3a0)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

52m13.929221882s ago: executing program 2 (id=228):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x2100000000, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

52m10.842996193s ago: executing program 3 (id=229):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0x894c, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r4, 0x9, 0x28033, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0x40305839, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f00000000c0)=0x6)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000000)=0x4})

52m2.206448273s ago: executing program 2 (id=230):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x5000, 0xd000, 0xffff, 0x1, 0x6})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000be7000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @svc={0x122, 0x40, {0x80000000, [0xe, 0x2, 0x0, 0x8, 0x1]}}], 0x68}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x4, 0x220)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000001c0)=@arm64_bitmap={0x6030000000160002, &(0x7f0000000180)=0x10})

51m59.102060227s ago: executing program 3 (id=231):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0xffff, 0x6})
r2 = eventfd2(0xff, 0x801)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)={0x80a0000, 0x101000})
ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0xa, 0xffffffffffffffff, 0x1})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x8, 0x9})
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000140)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0x3, 0x8, 0xfffffffa, 0x4}}, @eret={0xe6, 0x18, 0x8}, @code={0xa, 0x6c, {"000008d50000229e803c9fd200c0b0f2a10080d2220180d2c30080d2a40180d2020000d4000080ac007008d500e4a07e0000641e007008d50000399ec0138bd200e0b0f2610180d2620080d2830180d2c40180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x1, 0x2, 0x7fff, 0x1}}, @memwrite={0x6e, 0x30, @generic={0xdddca004, 0xe24, 0x6, 0x8}}, @hvc={0x32, 0x40, {0x8000, [0xffffffffffffffff, 0x8, 0xbbf5, 0x3, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xe8, 0xe}}, @msr={0x14, 0x20, {0x603000000013def1}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x31}}, @msr={0x14, 0x20, {0x6030000000139808, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013f518}}, @svc={0x122, 0x40, {0xffff, [0x3, 0x10, 0x92, 0x6, 0xfff]}}], 0x234}, &(0x7f00000003c0), 0x1)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000400)={0x3, [0x9, 0xffffffff, 0x100000001]})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000480)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000440)=0x12})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000004c0)={0xb, <r6=>0xffffffffffffffff, 0x1})
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000600)=[{0x0, &(0x7f0000000500)=[@irq_setup={0x46, 0x18, {0x4, 0xea}}, @uexit={0x0, 0x18, 0xff}, @uexit={0x0, 0x18, 0x8ecf}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x313}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0xb, 0x2, 0x10, 0x2}}, @msr={0x14, 0x20, {0x603000000013c00a, 0xa}}, @smc={0x1e, 0x40, {0x84000008, [0x0, 0x8, 0xda5f, 0xfffffffffffffff9, 0x9]}}], 0xf8}], 0x1, 0x0, &(0x7f0000000640)=[@featur2={0x1, 0x8a}], 0x1)
ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f0000000680))
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0xb, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000740)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000700)=0x1})
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000780)={0x9})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000007c0)={0x4, 0x11000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000800)={0x10200, 0x3, 0x8000000, 0x1000, &(0x7f0000e01000/0x1000)=nil})
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000840)={0xc0, 0x0, 0x10000})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000900)=@attr_other={0x0, 0xffffffff, 0x8001, &(0x7f00000008c0)=0x5})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000940)={0x3, 0x0, &(0x7f0000eda000/0x4000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000980)={{0x2000, 0x8080000, 0x9, 0xf8, 0xf7, 0x5, 0x91, 0x1, 0x3, 0x4, 0x5, 0x89}, {0x0, 0x4000, 0x1, 0x2, 0xa, 0x5, 0x7f, 0x8, 0x0, 0x9, 0x9, 0xf}, {0x4, 0xf000, 0x10, 0x7, 0xb, 0x2, 0x6, 0x4, 0x1, 0x14, 0x7, 0xf}, {0x3000, 0x4, 0x4, 0xcb, 0x7, 0xf1, 0x9, 0x3d, 0x2, 0x85, 0x5, 0x39}, {0x1000, 0xffff1000, 0x8, 0x8, 0xd2, 0x80, 0x0, 0x4, 0x4, 0x3, 0x7, 0x9}, {0x10000, 0xeeee0000, 0x0, 0x80, 0x8, 0x7, 0x5, 0x32, 0x8, 0x3, 0x81, 0x4}, {0x1, 0x5000, 0xf, 0x7, 0x10, 0x5f, 0x81, 0x9, 0x3, 0x4, 0x8, 0xd9}, {0x4000, 0x1, 0x0, 0x9, 0x38, 0x86, 0x2, 0xf, 0x36, 0x2, 0x2}, {0x2000, 0x7}, {0xeeee0000, 0x80}, 0x80000004, 0x0, 0xeeee8000, 0x204000, 0x5, 0xc00, 0x10000, [0x8, 0x4, 0xdd96, 0x2]})
eventfd2(0x3, 0x80801)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000ac0)={0x2, 0x80a6001, 0x2, 0xffffffffffffffff, 0x11})

51m51.323717234s ago: executing program 3 (id=232):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x181081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c00b}}], 0x18}, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x4, 0xd}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000d9d000/0x4000)=nil, 0x0, 0x0, 0x810, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)

51m50.026347628s ago: executing program 2 (id=233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x5d)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000000)={0x35, "aff0bfc54b76b80fc40c3dc942cad571a51a7b1d8c7d0795361eff0f62034294fbacfd0056c2ffae4a8ad13b4eddd12c1e6717b73f"})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x410801, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r6, r4, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000900)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
close(r6)

51m39.069971599s ago: executing program 2 (id=234):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0xf4ffffffff, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

51m35.779308931s ago: executing program 3 (id=235):
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)={0xed, "92c836c16e35ab144d3e3943024f3d7ff85b7f4e7507e665087fcaf627411fe982f1fd4b68a903bbf36e3b6e2d544d86a800245e12dfe513651ff6a8167eaf4c41c7a5678c320496e7dab0f3dd8ab5e3fb8e0a9bfcd451a9cf6975214a1fa7934900c937a076b7791e6d399978c8970f9d72fbfef680c23d5307700b20df20ed49187f4ea1f66eca2c51acd71e10ab452fa207660dbb12b3b889171b5998cd0a7e08d73cb185cef4b20084d262e6563e644f757f1c510020ba14388844fb156463c2a2b0a1fcbc8750896a8b42aab56c5dd8007380567eaeb43351e51e031b4ae837e1d28091c32f5f126495e5"})
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r0, 0x1000000, 0x10, r1, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000100)=0x100000001)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0xdfd6, 0x9, &(0x7f0000000140)})
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000001c0)={0x8001, 0x2})
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000200)={0x7f02, 0x10000})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x0, 0x13, r1, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000000280)="5ca8fcb6502328acd705d5a895d0e7dbd6c6b8ba67691617", 0x0, 0x18)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000300)=@arm64_sve={0x60800000001504ce, &(0x7f00000002c0)=0x3})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000340)={0xdf, 0x0, 0x10000})
ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000003c0)=0x1)
ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000400)=0x5)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r8, 0x5, 0x13, r2, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe93)
r9 = eventfd2(0x81, 0x1)
r10 = eventfd2(0x1, 0x80000)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000440)={r9, 0x400, 0x2, r10})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000004c0)=@arm64_extra={0x603000000013c023, &(0x7f0000000480)=0x868})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000500)=0x6)
ioctl$KVM_ARM_PREFERRED_TARGET(r4, 0x8020aeaf, &(0x7f0000000540))
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000580)=0x4)

51m28.150504089s ago: executing program 2 (id=236):
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x404100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000037)
ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, 0xfffffffffffffffe)

51m20.230733314s ago: executing program 2 (id=237):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x4b47, 0xfffffffffffffffe)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0x40086602, 0x20000000)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000))
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r5, 0x2, 0x12, r4, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x120)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r7 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

50m48.948959036s ago: executing program 34 (id=235):
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)={0xed, "92c836c16e35ab144d3e3943024f3d7ff85b7f4e7507e665087fcaf627411fe982f1fd4b68a903bbf36e3b6e2d544d86a800245e12dfe513651ff6a8167eaf4c41c7a5678c320496e7dab0f3dd8ab5e3fb8e0a9bfcd451a9cf6975214a1fa7934900c937a076b7791e6d399978c8970f9d72fbfef680c23d5307700b20df20ed49187f4ea1f66eca2c51acd71e10ab452fa207660dbb12b3b889171b5998cd0a7e08d73cb185cef4b20084d262e6563e644f757f1c510020ba14388844fb156463c2a2b0a1fcbc8750896a8b42aab56c5dd8007380567eaeb43351e51e031b4ae837e1d28091c32f5f126495e5"})
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r0, 0x1000000, 0x10, r1, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000100)=0x100000001)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0xdfd6, 0x9, &(0x7f0000000140)})
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000001c0)={0x8001, 0x2})
ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000200)={0x7f02, 0x10000})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x0, 0x13, r1, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000000280)="5ca8fcb6502328acd705d5a895d0e7dbd6c6b8ba67691617", 0x0, 0x18)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000300)=@arm64_sve={0x60800000001504ce, &(0x7f00000002c0)=0x3})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000340)={0xdf, 0x0, 0x10000})
ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f00000003c0)=0x1)
ioctl$KVM_ARM_VCPU_FINALIZE(r1, 0x4004aec2, &(0x7f0000000400)=0x5)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r8, 0x5, 0x13, r2, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe93)
r9 = eventfd2(0x81, 0x1)
r10 = eventfd2(0x1, 0x80000)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000440)={r9, 0x400, 0x2, r10})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000004c0)=@arm64_extra={0x603000000013c023, &(0x7f0000000480)=0x868})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000500)=0x6)
ioctl$KVM_ARM_PREFERRED_TARGET(r4, 0x8020aeaf, &(0x7f0000000540))
ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000580)=0x4)

50m32.612513348s ago: executing program 35 (id=237):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x4b47, 0xfffffffffffffffe)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0x40086602, 0x20000000)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000))
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r5, 0x2, 0x12, r4, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x120)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
r7 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

44m10.238807215s ago: executing program 4 (id=238):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r8 = syz_kvm_vgic_v3_setup(r5, 0x4, 0x220)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000038000/0x1000)=nil, 0x930, 0x1, 0x30, 0xffffffffffffffff, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r13, 0x603000000013df12, 0x8000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

44m1.839841184s ago: executing program 5 (id=239):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1957b4, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x6000)=nil, 0x0, 0x200000d, 0x28031, r2, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0xf0780000002e2172, 0x0})
ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000001)
r8 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x4, 0x220)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x14)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@msr={0x14, 0x20, {0x603000000013c65f, 0x8001}}], 0x20}, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f)
r12 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r14, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)

43m52.100560484s ago: executing program 4 (id=240):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0xf5ffffffff, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)

43m41.470664591s ago: executing program 4 (id=241):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x46) (async)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x46)
r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)

43m39.739198278s ago: executing program 5 (id=242):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000140)=0x7})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = eventfd2(0x7, 0x1)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1c)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x4010aeb5, &(0x7f00000002c0)={0x200})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x4, 0xffda, 0x1}})
r16 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r18, r19, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r19, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x8})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r6, 0x8})

43m27.746193878s ago: executing program 4 (id=243):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013d000, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x8, 0x0, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffff745, 0x6f0, &(0x7f0000000000)=0xfffffffffffffff8})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000700)={0x0, 0x0}, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xac)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000007c0)=@arm64_core={0x6030000000100046, &(0x7f0000000780)=0x6e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

42m51.82962508s ago: executing program 36 (id=242):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000140)=0x7})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = eventfd2(0x7, 0x1)
r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1c)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r9, 0x4010aeb5, &(0x7f00000002c0)={0x200})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000040)={0x4, 0xffda, 0x1}})
r16 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0)
r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r18, r19, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r19, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x8})
ioctl$KVM_RUN(r16, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r6, 0x8})

42m38.638891442s ago: executing program 37 (id=243):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013d000, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x8, 0x0, 0x0})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xfffff745, 0x6f0, &(0x7f0000000000)=0xfffffffffffffff8})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000700)={0x0, 0x0}, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xac)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000007c0)=@arm64_core={0x6030000000100046, &(0x7f0000000780)=0x6e})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

31m29.942017285s ago: executing program 7 (id=269):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x17)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x400454cd, 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x800000000008, &(0x7f00000004c0)=0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

31m21.077705616s ago: executing program 6 (id=270):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0xfffffffffffffffe) (async)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r4, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c40000/0x1000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

31m7.213842571s ago: executing program 7 (id=271):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013c01a}}, @smc={0x1e, 0x40, {0x84000004, [0x100000001, 0x7ff, 0x7, 0x3, 0x4124]}}, @code={0xa, 0x84, {"007008d500000010000008d5000008d5000028d5c05689d200c0b0f2010180d2620180d2230080d2040180d2020000d4a0ea94d20040b0f2c10180d2220080d2e30080d2040080d2020000d400008029007008d5007791d200c0b8f2a10080d2420180d2c30180d2c40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0xa99, 0x4}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x1d3}}, @code={0xa, 0x84, {"00a09f0c407a98d20080b0f2810080d2020080d2430080d2c40080d2020000d4008008d5007008d5008008d50000701ea0ad97d20040b0f2010080d2420180d2830180d2a40180d2020000d400b981d200c0b8f2210080d2220180d2e30180d2840080d2020000d40018285e008008d5"}}, @mrs={0xbe, 0x18, {0x603000000013b92d}}, @eret={0xe6, 0x18, 0x3ff}, @msr={0x14, 0x20, {0x603000000013deb8, 0xd9}}, @svc={0x122, 0x40, {0x6, [0x4, 0x5, 0x9, 0x0, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013803d}}, @hvc={0x32, 0x40, {0xc4000011, [0xc, 0x34, 0x0, 0x30, 0x7]}}, @msr={0x14, 0x20, {0x60300000001383f6, 0x1e86ccd9800000}}, @uexit={0x0, 0x18, 0x100000001}, @eret={0xe6, 0x18, 0x6}, @eret={0xe6, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e08e, 0xffffffffffffff81}}, @msr={0x14, 0x20, {0x301800000009f381, 0xbc}}, @code={0xa, 0x9c, {"0004801a60159bd20080b8f2a10080d2820180d2430080d2c40080d2020000d40008e0780038302ec00191d20020b8f2e10180d2c20180d2630180d2440080d2020000d4000008d5e0338cd20060b0f2a10080d2020180d2c30180d2c40080d2020000d4e00300aa0000a00d80179fd20060b0f2c10180d2020080d2430080d2c40080d2020000d4"}}, @eret={0xe6, 0x18, 0x9}], 0x3fc}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

31m2.811880134s ago: executing program 6 (id=272):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x145541, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xffffffff, 0x10001, 0x0})
syz_kvm_assert_reg(r4, 0x603000000013dce8, 0x8000)

30m52.462207935s ago: executing program 7 (id=273):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000380)={0x20000135})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x4000})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r6, 0x40000)

30m41.149447034s ago: executing program 6 (id=274):
munmap(&(0x7f0000ce0000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000c9c000/0x2000)=nil, 0x2000)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x7f)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000cd7000/0x1000)=nil, r3, 0x2, 0x110, r0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x15)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x4, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r10, 0xb})
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r10, 0x3})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)

30m18.118140793s ago: executing program 7 (id=275):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8})
r2 = eventfd2(0x5, 0x800)
write$eventfd(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x8)
eventfd2(0x7, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x7, r2})
r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x2c0181, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xaf832, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r2, 0x800006, 0x2, r2})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000e21000/0x3000)=nil, 0x0, 0x7, 0x1010, r0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x2001, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r5, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000d96000/0x1000)=nil, 0x930, 0x2000002, 0x10, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000e70000/0x4000)=nil, r5, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000deb000/0x3000)=nil, 0x3000)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000200)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1c00, 0xc, 0xe}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

30m15.826413543s ago: executing program 6 (id=276):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_extra={0x603000000013c103, &(0x7f0000000000)=0x2})

30m0.559415641s ago: executing program 6 (id=277):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1fffff9)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013802c}}], 0x18}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0xc000})

29m59.501737948s ago: executing program 7 (id=278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x0, 0x3000005, 0x41812, r1, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x0, 0x3000005, 0x41812, r1, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) (async)
ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)

29m48.934684413s ago: executing program 6 (id=279):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x30, r6, 0x40000)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r10, 0x3})
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r10, 0xf})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x40, 0x3000, 0x1, r10, 0xa})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="b7fd70886788e8e0e522022a69832d0435b8dd45f22344477a3b4c9464506ced90a91e573a3ffae3de1fc5cd2dd6f1294366d73f78a3bf8c268782fc65b9a6b4f9aa43c1777b7837", 0x0, 0x48)

29m47.648437022s ago: executing program 7 (id=280):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000000)=0x1)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010000e, &(0x7f0000000200)=0x4})
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r13, 0x603000000013dce5, 0x8000)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000040)={0x7, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x541b, 0x0)
syz_kvm_assert_reg(r13, 0x603000000013dce9, 0x8000)

29m0.998397205s ago: executing program 38 (id=279):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x30, r6, 0x40000)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r10, 0x3})
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r10, 0xf})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x40, 0x3000, 0x1, r10, 0xa})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000100)="b7fd70886788e8e0e522022a69832d0435b8dd45f22344477a3b4c9464506ced90a91e573a3ffae3de1fc5cd2dd6f1294366d73f78a3bf8c268782fc65b9a6b4f9aa43c1777b7837", 0x0, 0x48)

28m54.677687683s ago: executing program 39 (id=280):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010003c, &(0x7f0000000140)=0x7})
ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000000)=0x1)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010000e, &(0x7f0000000200)=0x4})
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r13, 0x603000000013dce5, 0x8000)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000040)={0x7, <r16=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x541b, 0x0)
syz_kvm_assert_reg(r13, 0x603000000013dce9, 0x8000)

20m11.389829373s ago: executing program 9 (id=282):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x80, 0x2, &(0x7f0000000080)=0x6})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000001c0)={0x5}})
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r6, 0x4004aec2, &(0x7f0000000180)=0x1)

20m4.009520882s ago: executing program 8 (id=281):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f00004e3000/0x2000)=nil, 0x930, 0xa, 0x2013, r2, 0x40000)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x0, 0x2, 0x9})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22300, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
mmap$KVM_VCPU(&(0x7f00004e3000/0x2000)=nil, 0x930, 0xa, 0x2013, r2, 0x40000) (async)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x0, 0x2, 0x9}) (async)

19m54.396776228s ago: executing program 9 (id=283):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async, rerun: 32)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async, rerun: 32)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async, rerun: 64)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async, rerun: 64)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000000)=[@featur2={0x1, 0x41}], 0x1)
syz_kvm_vgic_v3_setup(r1, 0x2, 0x3c0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece)
munmap(&(0x7f0000e69000/0x2000)=nil, 0x2000) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x1})

19m46.018702762s ago: executing program 8 (id=284):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, r6, 0x1000004, 0x7afd5aad766b861c, 0xffffffffffffffff, 0x0) (async)
r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r7, &(0x7f0000bfe000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x103fc, 0x4, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async, rerun: 64)
close(0x3) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_ccsidr={0x602000000011000b, &(0x7f00000000c0)=0x8000000}) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r1, 0x2, 0x20010, r7, 0x0) (async, rerun: 32)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (rerun: 32)

19m36.606215485s ago: executing program 9 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0x401c5820, 0x8000000000000001)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0xfc, 0x2, 0xffffffff, 0x4]}}, @hvc={0x32, 0x40, {0x84000051, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x40040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r10 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x2, 0x0)
ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000280)={0x1010020, 0x14})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
syz_kvm_setup_cpu$arm64(r14, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r12, r15, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4600000000000000180000000000000001000000a0"], 0x18}], 0x1, 0x0, 0x0, 0x0)
r16 = ioctl$KVM_GET_STATS_FD_vm(r12, 0xaece)
ioctl$KVM_CREATE_VM(r16, 0xae01, 0x13)

19m28.279457612s ago: executing program 8 (id=286):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, 0x80a0000, 0x4, r3})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xc2c3, 0x3000, 0x1, r3, 0x4})
r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
eventfd2(0xfffffffa, 0x80001) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r3}) (async)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4, 0x80a0000, 0x4, r3}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xc2c3, 0x3000, 0x1, r3, 0x4}) (async)
syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)

19m11.919614034s ago: executing program 9 (id=287):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0x40305829, 0xd0ffffffffff0f00) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x894c, 0x0)
r8 = eventfd2(0x9, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
r11 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x160) (async)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x0, '\x00', 0x9}) (async)
r12 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100"])
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, <r16=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r16, 0x400454e2, 0x110c230020)
write$eventfd(r8, &(0x7f0000000000)=0x10000, 0x8) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62)

19m8.216263988s ago: executing program 8 (id=288):
r0 = eventfd2(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8})
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r0, 0x0, 0x1, r0})
r7 = eventfd2(0x8, 0x80800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r0, 0x4})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0x80111500, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
eventfd2(0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8}) (async)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r0, 0x0, 0x1, r0}) (async)
eventfd2(0x8, 0x80800) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r0, 0x4}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0x80111500, 0x20000000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) (async)

18m24.010110084s ago: executing program 40 (id=287):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0x40305829, 0xd0ffffffffff0f00) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r7, 0x894c, 0x0)
r8 = eventfd2(0x9, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
r11 = syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x160) (async)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x0, '\x00', 0x9}) (async)
r12 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r13, 0x4020ae46, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100"])
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, <r16=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r16, 0x400454e2, 0x110c230020)
write$eventfd(r8, &(0x7f0000000000)=0x10000, 0x8) (async)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62)

18m15.168954862s ago: executing program 41 (id=288):
r0 = eventfd2(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8})
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r0, 0x0, 0x1, r0})
r7 = eventfd2(0x8, 0x80800)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r0, 0x4})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0x80111500, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0)
eventfd2(0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) (async)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013c029, &(0x7f00000000c0)=0x8}) (async)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r0, 0x0, 0x1, r0}) (async)
eventfd2(0x8, 0x80800) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x3, 0xff0d77deeb9aad17, 0x0, r0, 0x4}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r9, 0x80111500, 0x20000000) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) (async)

2m42.19933265s ago: executing program 1 (id=328):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r5 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="38ce8347fc1e86008cfc72bb312c8659dcc9225b48cb5cb00c73b0b30800000073f7f1f493e89c859e17625ad1b19c73a7fd4ce992bfc316bd22ccc646cd69c72800", 0x0, 0x1f)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="7cfaa2bfd6dd76375aa1bde04fceeb33743b07d73b3e9aac", 0x0, 0xffffffffffffff94)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x46)
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x0, &(0x7f00000002c0)=0x2c172c22})
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a67000/0x400000)=nil)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0x80811501, 0x20000000)
r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

2m31.299723656s ago: executing program 0 (id=329):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x6030000000138010, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x800})

2m15.550534563s ago: executing program 1 (id=330):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000000000f)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0xc000)
syz_kvm_assert_syzos_uexit$arm64(r8, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xc0045878, 0x20000000)
mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r2, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

2m12.356215373s ago: executing program 0 (id=331):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x0, {0x84000053, [0x1000009, 0x8000000000000001, 0xffffffffffffffff, 0x400, 0xfffffffffffff801]}}], 0xc7}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000cf9000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) (async)
r8 = eventfd2(0x0, 0x0)
close(r8) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r8, &(0x7f0000000180)=0x5, 0xfffffde3)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r10, 0x4068aea3, &(0x7f0000000200)) (async)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
r12 = syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000280)=0x5}) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
mmap$KVM_VCPU(&(0x7f0000005000/0x2000)=nil, 0x930, 0x2000002, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

1m59.768301914s ago: executing program 1 (id=332):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f00004e3000/0x2000)=nil, 0x930, 0xa, 0x2013, r2, 0x40000)

1m51.957852761s ago: executing program 0 (id=333):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r0, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000000)=0x17})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013d000, 0x8000}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

1m45.722525165s ago: executing program 1 (id=334):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x6030000000100014, &(0x7f0000000200)=0x4})
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x2000, 0x1000})
r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f000071f000/0x2000)=nil, r9, 0x1000002, 0x813, r7, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r9, 0x9, 0x1010, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r9, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r9, 0x2000007, 0x10, r7, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r11, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
munmap(&(0x7f0000e50000/0x2000)=nil, 0x2000)
eventfd2(0x9, 0x1)
openat$kvm(0x0, &(0x7f0000000080), 0x40000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20)

1m35.358287835s ago: executing program 0 (id=335):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c600, 0xfefefee0}}], 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)})
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013c2a9, 0x101}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, <r7=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0xfffffffffffffff9, 0x0})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000000000004000000050000000100000000000000420000000000000004000000000000000600000000000000000000000400000003000000000000000000000000000000070000000400000000000000000000000000000000000000000000000000000003000000030000000000000000000000000200000400000000000000000000000000000000000000000000000000000002000000040000000100000000000000020000000900"/191])

1m25.293855075s ago: executing program 1 (id=336):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r0 = mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0x40086602, 0x110e22ffff) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0x40086602, 0x110e22ffff)
openat$kvm(0x0, &(0x7f0000000100), 0x264a03, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x264a03, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r3 = eventfd2(0xfffffffa, 0x80001)
r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@other={0x401, &(0x7f0000000080)=0x3})
write$eventfd(r4, &(0x7f00000001c0)=0x8000000000000000, 0x3b) (async)
write$eventfd(r4, &(0x7f00000001c0)=0x8000000000000000, 0x3b)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x18) (async)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x18)
ioctl$KVM_CREATE_VM(r4, 0x40086602, 0x20000000) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0x40086602, 0x20000000)
ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x110e227ffe)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r7, 0x4068aea3, 0xfffffffffffffffe) (async)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r7, 0x4068aea3, 0xfffffffffffffffe)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_setup_cpu$arm64(r9, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r5, @ANYRES64=r4, @ANYRESDEC=r9, @ANYRES8=r1, @ANYRESHEX=r12, @ANYRES64=r1], 0x25c}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)

1m15.74775862s ago: executing program 0 (id=337):
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x110e22ffff)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r4 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r4, &(0x7f0000000100)=0x8, 0x8)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x20000000)
ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110e227ffe)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$arm64(r10, r12, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

1m3.760997418s ago: executing program 1 (id=338):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r8, 0x2, 0x11, r7, 0x0)
r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xd40, 0x1000, 0x5}}, @uexit={0x0, 0x18, 0x5}, @svc={0x122, 0x40, {0x5000000, [0x3, 0x100, 0x1, 0x401, 0xa14]}}, @msr={0x14, 0x20, {0x603000000013f600, 0xfffffffffffffffc}}, @uexit={0x0, 0x18, 0x1ff5}, @code={0xa, 0x9c, {"000028d500b789d20020b8f2810180d2e20080d2030080d2240180d2020000d4000028d500a0002f007008d540298ed200a0b0f2610180d2620080d2030080d2040080d2020000d4806891d20080b0f2c10180d2420180d2230080d2240080d2020000d4602c84d20000b8f2410180d2220180d2230180d2440080d2020000d4000008d5000400bc"}}, @code={0xa, 0x54, {"007008d5007008d50000001c00fca05e007008d50084000de0c287d20020b8f2c10180d2020180d2030180d2a40180d2020000d4007008d5000028d50084006f"}}, @hvc={0x32, 0x40, {0x86000081, [0x8, 0x80000000, 0x0, 0xffffffffffffffaa]}}, @hvc={0x32, 0x40, {0xc4000004, [0x5031, 0x7fffffffffffffff, 0x3, 0x129, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0xc, 0x0, 0x9, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0xc58, 0xfffffffffffffff9}}, @eret={0xe6, 0x18, 0xffffffffffffff21}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x6030000000139828}}, @smc={0x1e, 0x40, {0xc5000020, [0x6, 0x4de34310, 0x2, 0xfffffffffffffff7, 0x3]}}, @smc={0x1e, 0x40, {0xc4000011, [0x3b, 0xfffffffffffffffc, 0x2, 0xfff, 0x4]}}, @smc={0x1e, 0x40, {0x32000000, [0x9, 0x0, 0x80, 0x5bb0, 0x2]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x21e}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x66}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0xd4}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x0, 0x0, 0x100, 0xb, 0x2}}, @uexit={0x0, 0x18, 0x9}, @irq_setup={0x46, 0x18, {0x1, 0x376}}, @irq_setup={0x46, 0x18, {0x3, 0xea}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x1, 0x4, 0x2, 0x9, 0x4}}, @svc={0x122, 0x40, {0x86000001, [0x5, 0x5, 0x9, 0x63d, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013c00a}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x2bc}}, @smc={0x1e, 0x40, {0x10d001060, [0x2, 0x4, 0xfffffffffffffff1, 0x9, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e66a, 0x8}}], 0x580}, &(0x7f0000000740)=[@featur2={0x1, 0x4}], 0x1)
r10 = mmap$KVM_VCPU(&(0x7f0000003000/0x4000)=nil, r8, 0x0, 0x810, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r11 = eventfd2(0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r13, 0x4068aea3, 0x0)
ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f0000000100))
close(r11)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r11, &(0x7f0000000180)=0x5, 0xfffffde3)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f00000000c0)={0x100, 0x8000})

47.588168728s ago: executing program 0 (id=339):
openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5) (async)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)=0xd})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
close(0x3)
eventfd2(0x81, 0x80000)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

16.209063247s ago: executing program 42 (id=338):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r8, 0x2, 0x11, r7, 0x0)
r9 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xd40, 0x1000, 0x5}}, @uexit={0x0, 0x18, 0x5}, @svc={0x122, 0x40, {0x5000000, [0x3, 0x100, 0x1, 0x401, 0xa14]}}, @msr={0x14, 0x20, {0x603000000013f600, 0xfffffffffffffffc}}, @uexit={0x0, 0x18, 0x1ff5}, @code={0xa, 0x9c, {"000028d500b789d20020b8f2810180d2e20080d2030080d2240180d2020000d4000028d500a0002f007008d540298ed200a0b0f2610180d2620080d2030080d2040080d2020000d4806891d20080b0f2c10180d2420180d2230080d2240080d2020000d4602c84d20000b8f2410180d2220180d2230180d2440080d2020000d4000008d5000400bc"}}, @code={0xa, 0x54, {"007008d5007008d50000001c00fca05e007008d50084000de0c287d20020b8f2c10180d2020180d2030180d2a40180d2020000d4007008d5000028d50084006f"}}, @hvc={0x32, 0x40, {0x86000081, [0x8, 0x80000000, 0x0, 0xffffffffffffffaa]}}, @hvc={0x32, 0x40, {0xc4000004, [0x5031, 0x7fffffffffffffff, 0x3, 0x129, 0xd]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0xc, 0x0, 0x9, 0x4}}, @memwrite={0x6e, 0x30, @generic={0xd000, 0xc58, 0xfffffffffffffff9}}, @eret={0xe6, 0x18, 0xffffffffffffff21}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x6030000000139828}}, @smc={0x1e, 0x40, {0xc5000020, [0x6, 0x4de34310, 0x2, 0xfffffffffffffff7, 0x3]}}, @smc={0x1e, 0x40, {0xc4000011, [0x3b, 0xfffffffffffffffc, 0x2, 0xfff, 0x4]}}, @smc={0x1e, 0x40, {0x32000000, [0x9, 0x0, 0x80, 0x5bb0, 0x2]}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x21e}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x66}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0xd4}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x0, 0x0, 0x100, 0xb, 0x2}}, @uexit={0x0, 0x18, 0x9}, @irq_setup={0x46, 0x18, {0x1, 0x376}}, @irq_setup={0x46, 0x18, {0x3, 0xea}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x1, 0x4, 0x2, 0x9, 0x4}}, @svc={0x122, 0x40, {0x86000001, [0x5, 0x5, 0x9, 0x63d, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013c00a}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x2bc}}, @smc={0x1e, 0x40, {0x10d001060, [0x2, 0x4, 0xfffffffffffffff1, 0x9, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e66a, 0x8}}], 0x580}, &(0x7f0000000740)=[@featur2={0x1, 0x4}], 0x1)
r10 = mmap$KVM_VCPU(&(0x7f0000003000/0x4000)=nil, r8, 0x0, 0x810, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r11 = eventfd2(0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r13, 0x4068aea3, 0x0)
ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f0000000100))
close(r11)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r11, &(0x7f0000000180)=0x5, 0xfffffde3)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f00000000c0)={0x100, 0x8000})

0s ago: executing program 43 (id=339):
openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5) (async)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)=0xd})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
close(0x3)
eventfd2(0x81, 0x80000)
ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x20000000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[  388.647527][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.921711][ T3151] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:20171' (ED25519) to the list of known hosts.
[  584.801519][   T25] audit: type=1400 audit(584.040:61): avc:  denied  { name_bind } for  pid=3308 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  585.699792][   T25] audit: type=1400 audit(584.940:62): avc:  denied  { execute } for  pid=3309 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  585.718966][   T25] audit: type=1400 audit(584.960:63): avc:  denied  { execute_no_trans } for  pid=3309 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  604.541068][   T25] audit: type=1400 audit(603.780:64): avc:  denied  { mounton } for  pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  604.577924][   T25] audit: type=1400 audit(603.810:65): avc:  denied  { mount } for  pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  604.660017][ T3309] cgroup: Unknown subsys name 'net'
[  604.710201][   T25] audit: type=1400 audit(603.950:66): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  605.102145][ T3309] cgroup: Unknown subsys name 'cpuset'
[  605.205268][ T3309] cgroup: Unknown subsys name 'rlimit'
[  606.096401][   T25] audit: type=1400 audit(605.340:67): avc:  denied  { setattr } for  pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  606.127990][   T25] audit: type=1400 audit(605.350:68): avc:  denied  { mounton } for  pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  606.147382][   T25] audit: type=1400 audit(605.380:69): avc:  denied  { mount } for  pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  607.711323][ T3312] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  607.731431][   T25] audit: type=1400 audit(606.970:70): avc:  denied  { relabelto } for  pid=3312 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  607.759017][   T25] audit: type=1400 audit(607.000:71): avc:  denied  { write } for  pid=3312 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  607.950419][   T25] audit: type=1400 audit(607.190:72): avc:  denied  { read } for  pid=3309 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  607.968451][   T25] audit: type=1400 audit(607.200:73): avc:  denied  { open } for  pid=3309 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  608.018412][ T3309] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  657.166913][   T25] audit: type=1400 audit(656.410:74): avc:  denied  { execmem } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  661.518042][   T25] audit: type=1400 audit(660.760:75): avc:  denied  { read } for  pid=3316 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  661.529601][   T25] audit: type=1400 audit(660.770:76): avc:  denied  { open } for  pid=3315 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  661.592026][   T25] audit: type=1400 audit(660.830:77): avc:  denied  { mounton } for  pid=3316 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  661.827110][   T25] audit: type=1400 audit(661.070:78): avc:  denied  { module_request } for  pid=3315 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  661.866253][   T25] audit: type=1400 audit(661.090:79): avc:  denied  { module_request } for  pid=3316 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  662.957192][   T25] audit: type=1400 audit(662.180:80): avc:  denied  { sys_module } for  pid=3315 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  686.190358][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.426918][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.481992][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.759943][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.874811][ T3315] hsr_slave_0: entered promiscuous mode
[  700.920138][ T3315] hsr_slave_1: entered promiscuous mode
[  702.385053][ T3316] hsr_slave_0: entered promiscuous mode
[  702.446428][ T3316] hsr_slave_1: entered promiscuous mode
[  702.485962][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[  702.496013][ T3316] Cannot create hsr debugfs directory
[  709.649220][   T25] audit: type=1400 audit(708.890:81): avc:  denied  { create } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  709.704518][   T25] audit: type=1400 audit(708.930:82): avc:  denied  { write } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  709.750487][   T25] audit: type=1400 audit(708.990:83): avc:  denied  { read } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  709.871707][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  710.171470][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  710.436554][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  710.576873][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  712.411300][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  712.707886][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  712.829866][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  713.037810][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  724.878756][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.228484][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.388814][ T3315] veth0_vlan: entered promiscuous mode
[  786.018004][ T3315] veth1_vlan: entered promiscuous mode
[  788.086156][ T3316] veth0_vlan: entered promiscuous mode
[  788.429205][ T3315] veth0_macvtap: entered promiscuous mode
[  788.720765][ T3315] veth1_macvtap: entered promiscuous mode
[  788.931677][ T3316] veth1_vlan: entered promiscuous mode
[  791.040837][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.068202][ T3419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.076675][ T3419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.107998][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.836964][ T3316] veth0_macvtap: entered promiscuous mode
[  792.430412][ T3316] veth1_macvtap: entered promiscuous mode
[  793.745841][   T25] audit: type=1400 audit(792.980:84): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  793.946111][   T25] audit: type=1400 audit(793.180:85): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/syzkaller.woBOKU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  794.124194][   T25] audit: type=1400 audit(793.350:86): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  794.569522][   T25] audit: type=1400 audit(793.720:87): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/syzkaller.woBOKU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  794.736508][   T25] audit: type=1400 audit(793.970:88): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/syzkaller.woBOKU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  795.004576][   T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  795.005631][   T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  795.018834][   T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  795.028816][   T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  795.280984][   T25] audit: type=1400 audit(794.520:89): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  795.547071][   T25] audit: type=1400 audit(794.740:90): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  795.612395][   T25] audit: type=1400 audit(794.850:91): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  795.861601][   T25] audit: type=1400 audit(795.090:92): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  795.935640][   T25] audit: type=1400 audit(795.150:93): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  797.334733][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  806.139414][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  806.149469][   T25] audit: type=1400 audit(805.380:98): avc:  denied  { read } for  pid=3472 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.195432][   T25] audit: type=1400 audit(805.430:99): avc:  denied  { open } for  pid=3472 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.318737][   T25] audit: type=1400 audit(805.560:100): avc:  denied  { ioctl } for  pid=3472 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  818.240332][   T25] audit: type=1400 audit(817.480:101): avc:  denied  { write } for  pid=3482 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  820.681083][   T25] audit: type=1400 audit(819.920:102): avc:  denied  { execute } for  pid=3482 comm="syz.0.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  836.516683][   T25] audit: type=1400 audit(835.750:103): avc:  denied  { append } for  pid=3491 comm="syz.0.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  847.186493][   T25] audit: type=1400 audit(846.420:104): avc:  denied  { map } for  pid=3497 comm="syz.1.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  928.705907][ T3544] kvm [3544]: Failed to find VMA for hva 0x20c01000
[ 1360.731711][   T25] audit: type=1400 audit(1359.910:105): avc:  denied  { ioctl } for  pid=3828 comm="syz.1.120" path="net:[4026532615]" dev="nsfs" ino=4026532615 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1375.090004][   T25] audit: type=1400 audit(1374.280:106): avc:  denied  { execute } for  pid=3834 comm="syz.0.122" path="/62/T" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1391.364571][   T25] audit: type=1400 audit(1390.590:107): avc:  denied  { setattr } for  pid=3848 comm="syz.0.127" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1725.665828][ T4083] kvm [4081]: Unsupported guest access at: eeef0000
[ 1725.665828][ T4083]  { Op0( 2), Op1( 5), CRn(11), CRm(11), Op2( 3), func_write },
[ 1726.219645][ T4084] kvm [4081]: Unsupported guest access at: eeef0000
[ 1726.219645][ T4084]  { Op0( 2), Op1( 5), CRn(11), CRm(11), Op2( 3), func_write },
[ 1834.136601][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1835.390203][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1836.417029][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1837.976509][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1851.906277][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1852.066821][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1852.158391][   T51] bond0 (unregistering): Released all slaves
[ 1854.257627][   T51] hsr_slave_0: left promiscuous mode
[ 1854.575399][   T51] hsr_slave_1: left promiscuous mode
[ 1855.605275][   T51] veth1_macvtap: left promiscuous mode
[ 1855.615141][   T51] veth0_macvtap: left promiscuous mode
[ 1855.639158][   T51] veth1_vlan: left promiscuous mode
[ 1855.666461][   T51] veth0_vlan: left promiscuous mode
[ 1873.077575][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.310152][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1875.296152][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1876.176633][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1888.827982][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1888.909763][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1888.966177][   T51] bond0 (unregistering): Released all slaves
[ 1890.538462][   T51] hsr_slave_0: left promiscuous mode
[ 1890.604699][   T51] hsr_slave_1: left promiscuous mode
[ 1890.980328][   T51] veth1_macvtap: left promiscuous mode
[ 1891.010867][   T51] veth0_macvtap: left promiscuous mode
[ 1891.018990][   T51] veth1_vlan: left promiscuous mode
[ 1891.027698][   T51] veth0_vlan: left promiscuous mode
[ 1926.389629][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1926.630237][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1931.459796][ T4135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1931.709703][ T4135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1947.398741][ T4131] hsr_slave_0: entered promiscuous mode
[ 1947.476255][ T4131] hsr_slave_1: entered promiscuous mode
[ 1953.080752][ T4135] hsr_slave_0: entered promiscuous mode
[ 1953.119549][ T4135] hsr_slave_1: entered promiscuous mode
[ 1953.157419][ T4135] debugfs: 'hsr0' already exists in 'hsr'
[ 1953.161825][ T4135] Cannot create hsr debugfs directory
[ 1961.985209][ T4131] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1962.545651][ T4131] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1962.895002][ T4131] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1963.367479][ T4131] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1968.530531][ T4135] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1968.928350][ T4135] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1969.378266][ T4135] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1969.859348][ T4135] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1991.250353][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1996.858647][ T4135] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2081.546563][ T4131] veth0_vlan: entered promiscuous mode
[ 2082.358564][ T4131] veth1_vlan: entered promiscuous mode
[ 2085.080728][ T4131] veth0_macvtap: entered promiscuous mode
[ 2085.552569][ T4131] veth1_macvtap: entered promiscuous mode
[ 2089.390503][ T4135] veth0_vlan: entered promiscuous mode
[ 2090.128408][ T4139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.135681][ T4139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.148089][ T4139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.205853][ T4151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.770256][ T4135] veth1_vlan: entered promiscuous mode
[ 2096.420388][ T4135] veth0_macvtap: entered promiscuous mode
[ 2097.406382][ T4135] veth1_macvtap: entered promiscuous mode
[ 2101.225350][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2101.231376][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2101.344673][   T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2101.406704][   T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2360.289939][ T4467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2361.041343][ T4467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2383.571561][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2383.972241][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2389.228429][ T4151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2390.767380][ T4151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2392.289118][ T4151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2393.709242][ T4151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2402.170342][ T4467] hsr_slave_0: entered promiscuous mode
[ 2402.230717][ T4467] hsr_slave_1: entered promiscuous mode
[ 2402.290462][ T4467] debugfs: 'hsr0' already exists in 'hsr'
[ 2402.314555][ T4467] Cannot create hsr debugfs directory
[ 2413.201290][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2413.317318][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2413.367664][ T4151] bond0 (unregistering): Released all slaves
[ 2416.066493][ T4151] hsr_slave_0: left promiscuous mode
[ 2416.228120][ T4151] hsr_slave_1: left promiscuous mode
[ 2416.812448][ T4151] veth1_macvtap: left promiscuous mode
[ 2416.906518][ T4151] veth0_macvtap: left promiscuous mode
[ 2416.921348][ T4151] veth1_vlan: left promiscuous mode
[ 2416.945569][ T4151] veth0_vlan: left promiscuous mode
[ 2434.601519][ T4480] hsr_slave_0: entered promiscuous mode
[ 2434.657764][ T4480] hsr_slave_1: entered promiscuous mode
[ 2437.769922][ T4151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2439.178397][ T4151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2441.289612][ T4151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2442.415706][ T4151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2453.519967][ T4467] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2453.830542][ T4467] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2454.402483][ T4467] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2464.425407][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2464.617385][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2464.731049][ T4151] bond0 (unregistering): Released all slaves
[ 2465.525061][ T4467] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2466.875199][ T4151] hsr_slave_0: left promiscuous mode
[ 2466.948827][ T4151] hsr_slave_1: left promiscuous mode
[ 2467.226658][ T4151] veth1_macvtap: left promiscuous mode
[ 2467.230052][ T4151] veth0_macvtap: left promiscuous mode
[ 2467.242527][ T4151] veth1_vlan: left promiscuous mode
[ 2467.248120][ T4151] veth0_vlan: left promiscuous mode
[ 2484.242463][ T4480] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2484.747426][ T4480] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2485.081523][ T4480] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2485.451298][ T4480] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2507.248261][ T4467] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2512.390978][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2632.867419][ T4467] veth0_vlan: entered promiscuous mode
[ 2633.899924][ T4467] veth1_vlan: entered promiscuous mode
[ 2637.935869][ T4467] veth0_macvtap: entered promiscuous mode
[ 2638.749248][ T4467] veth1_macvtap: entered promiscuous mode
[ 2640.540425][ T4480] veth0_vlan: entered promiscuous mode
[ 2642.837088][ T4480] veth1_vlan: entered promiscuous mode
[ 2644.274970][ T4038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2644.287799][ T4038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2644.334541][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2644.693953][   T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2649.206335][ T4480] veth0_macvtap: entered promiscuous mode
[ 2650.246201][ T4480] veth1_macvtap: entered promiscuous mode
[ 2654.920383][ T3221] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2654.935535][ T4150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2654.936468][ T4150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2654.937263][ T4150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2784.909511][ T3419] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2786.918291][ T3419] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2788.649572][ T3419] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2790.651425][ T3419] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2809.074705][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2809.240405][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2809.377701][ T3419] bond0 (unregistering): Released all slaves
[ 2813.125245][ T3419] hsr_slave_0: left promiscuous mode
[ 2813.245336][ T3419] hsr_slave_1: left promiscuous mode
[ 2814.086704][ T3419] veth1_macvtap: left promiscuous mode
[ 2814.087995][ T3419] veth0_macvtap: left promiscuous mode
[ 2814.101083][ T3419] veth1_vlan: left promiscuous mode
[ 2814.103372][ T3419] veth0_vlan: left promiscuous mode
[ 2847.800664][ T3419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2848.899584][ T3419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2850.057810][ T3419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2851.878257][ T3419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2874.116735][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2874.390335][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2874.568140][ T3419] bond0 (unregistering): Released all slaves
[ 2876.929512][ T3419] hsr_slave_0: left promiscuous mode
[ 2877.054980][ T3419] hsr_slave_1: left promiscuous mode
[ 2877.634342][ T3419] veth1_macvtap: left promiscuous mode
[ 2877.635625][ T3419] veth0_macvtap: left promiscuous mode
[ 2877.641695][ T3419] veth1_vlan: left promiscuous mode
[ 2877.676422][ T3419] veth0_vlan: left promiscuous mode
[ 2916.580465][ T4752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2916.867288][ T4752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2920.415343][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2920.685755][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2948.920051][ T4752] hsr_slave_0: entered promiscuous mode
[ 2949.008729][ T4752] hsr_slave_1: entered promiscuous mode
[ 2953.818939][ T4760] hsr_slave_0: entered promiscuous mode
[ 2953.912209][ T4760] hsr_slave_1: entered promiscuous mode
[ 2953.995846][ T4760] debugfs: 'hsr0' already exists in 'hsr'
[ 2954.004363][ T4760] Cannot create hsr debugfs directory
[ 2967.718760][ T4752] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2968.260164][ T4752] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2968.799239][ T4752] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2969.497736][ T4752] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2974.446273][ T4760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2975.037186][ T4760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2975.511643][ T4760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2975.949752][ T4760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 3004.336900][ T4752] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3010.061791][ T4760] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3154.178294][ T4752] veth0_vlan: entered promiscuous mode
[ 3155.190585][ T4752] veth1_vlan: entered promiscuous mode
[ 3158.741065][ T4760] veth0_vlan: entered promiscuous mode
[ 3160.729229][ T4752] veth0_macvtap: entered promiscuous mode
[ 3161.020103][ T4760] veth1_vlan: entered promiscuous mode
[ 3161.825903][ T4752] veth1_macvtap: entered promiscuous mode
[ 3166.441421][ T4760] veth0_macvtap: entered promiscuous mode
[ 3167.195538][ T4769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3167.197295][ T4769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3167.211077][ T4769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3167.357548][ T4769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3167.919222][ T4760] veth1_macvtap: entered promiscuous mode
[ 3174.982373][ T4767] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3174.987376][ T4767] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3175.028911][ T4767] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3175.058989][ T4767] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3498.654073][   T25] audit: type=1400 audit(3497.820:108): avc:  denied  { execute } for  pid=5167 comm="syz.7.275" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 3606.058599][ T4763] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3608.651063][ T4763] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3611.486384][ T4763] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3614.529157][ T4763] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3645.139624][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3645.375589][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3645.537332][ T4763] bond0 (unregistering): Released all slaves
[ 3649.635233][ T4763] hsr_slave_0: left promiscuous mode
[ 3650.187777][ T4763] hsr_slave_1: left promiscuous mode
[ 3651.811817][ T4763] veth1_macvtap: left promiscuous mode
[ 3651.897287][ T4763] veth0_macvtap: left promiscuous mode
[ 3651.910742][ T4763] veth1_vlan: left promiscuous mode
[ 3651.912331][ T4763] veth0_vlan: left promiscuous mode
[ 3688.061386][ T4763] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3689.806733][ T4763] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3691.390528][ T4763] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3692.918305][ T4763] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3715.340161][ T4763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3715.546325][ T4763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3715.695595][ T4763] bond0 (unregistering): Released all slaves
[ 3717.900265][ T4763] hsr_slave_0: left promiscuous mode
[ 3717.997146][ T4763] hsr_slave_1: left promiscuous mode
[ 3718.284659][ T4763] veth1_macvtap: left promiscuous mode
[ 3718.315650][ T4763] veth0_macvtap: left promiscuous mode
[ 3718.317833][ T4763] veth1_vlan: left promiscuous mode
[ 3718.319376][ T4763] veth0_vlan: left promiscuous mode
[ 3780.619343][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3781.042595][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3785.804415][ T5207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3786.176240][ T5207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3817.192317][ T5211] hsr_slave_0: entered promiscuous mode
[ 3817.327940][ T5211] hsr_slave_1: entered promiscuous mode
[ 3821.768707][ T5207] hsr_slave_0: entered promiscuous mode
[ 3821.851044][ T5207] hsr_slave_1: entered promiscuous mode
[ 3821.891022][ T5207] debugfs: 'hsr0' already exists in 'hsr'
[ 3821.933846][ T5207] Cannot create hsr debugfs directory
[ 3841.637394][ T5211] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3842.640951][ T5211] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3843.252187][ T5211] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3844.108723][ T5211] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3852.281507][ T5207] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3852.820779][ T5207] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3853.504864][ T5207] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3854.297379][ T5207] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3884.910710][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3892.969887][ T5207] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4063.422037][ T5211] veth0_vlan: entered promiscuous mode
[ 4064.509471][ T5211] veth1_vlan: entered promiscuous mode
[ 4069.327888][ T5211] veth0_macvtap: entered promiscuous mode
[ 4071.101606][ T5211] veth1_macvtap: entered promiscuous mode
[ 4071.407782][ T5207] veth0_vlan: entered promiscuous mode
[ 4073.520377][ T5207] veth1_vlan: entered promiscuous mode
[ 4078.450182][ T4150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4078.539555][ T5212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4078.547980][ T5212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4078.560273][ T5212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4081.288183][ T5207] veth0_macvtap: entered promiscuous mode
[ 4082.737043][ T5207] veth1_macvtap: entered promiscuous mode
[ 4089.810043][ T5212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4089.826060][ T5212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4089.885987][ T5212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4089.894720][ T5212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4231.056699][   T42] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4233.430407][   T42] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4235.629815][   T42] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4238.446309][   T42] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4275.841642][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4276.199216][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4276.590812][   T42] bond0 (unregistering): Released all slaves
[ 4280.178570][   T42] hsr_slave_0: left promiscuous mode
[ 4280.435825][   T42] hsr_slave_1: left promiscuous mode
[ 4281.646933][   T42] veth1_macvtap: left promiscuous mode
[ 4281.735610][   T42] veth0_macvtap: left promiscuous mode
[ 4281.751288][   T42] veth1_vlan: left promiscuous mode
[ 4281.799553][   T42] veth0_vlan: left promiscuous mode
[ 4333.131885][   T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4335.841073][   T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4337.815852][   T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4340.421564][   T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4364.371933][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4364.560764][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4364.804378][   T42] bond0 (unregistering): Released all slaves
[ 4368.075134][   T42] hsr_slave_0: left promiscuous mode
[ 4368.167445][   T42] hsr_slave_1: left promiscuous mode
[ 4368.837733][   T42] veth1_macvtap: left promiscuous mode
[ 4368.878396][   T42] veth0_macvtap: left promiscuous mode
[ 4368.886477][   T42] veth1_vlan: left promiscuous mode
[ 4368.888024][   T42] veth0_vlan: left promiscuous mode
[ 4454.726287][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4455.160050][ T5521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4455.502417][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4455.818706][ T5521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4497.182266][ T5516] hsr_slave_0: entered promiscuous mode
[ 4497.251444][ T5516] hsr_slave_1: entered promiscuous mode
[ 4501.429072][ T5521] hsr_slave_0: entered promiscuous mode
[ 4501.507874][ T5521] hsr_slave_1: entered promiscuous mode
[ 4501.595862][ T5521] debugfs: 'hsr0' already exists in 'hsr'
[ 4501.598929][ T5521] Cannot create hsr debugfs directory
[ 4543.127078][ T5516] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 4543.910557][ T5516] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 4544.519695][ T5516] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 4545.571800][ T5516] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 4551.069558][ T5521] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 4551.596341][ T5521] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 4552.177437][ T5521] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 4552.798845][ T5521] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 4585.750006][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4593.478911][ T5521] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4730.631393][ T5516] veth0_vlan: entered promiscuous mode
[ 4731.759886][ T5516] veth1_vlan: entered promiscuous mode
[ 4737.725558][ T5521] veth0_vlan: entered promiscuous mode
[ 4738.339232][ T5516] veth0_macvtap: entered promiscuous mode
[ 4739.658789][ T5516] veth1_macvtap: entered promiscuous mode
[ 4740.405928][ T5521] veth1_vlan: entered promiscuous mode
[ 4746.140687][ T5212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4746.198149][ T5210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4746.209010][ T5210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4746.280410][ T5210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4748.130933][ T5521] veth0_macvtap: entered promiscuous mode
[ 4749.527826][ T5521] veth1_macvtap: entered promiscuous mode
[ 4756.521171][ T5435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4756.530413][ T5435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4756.556506][ T5435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4756.668325][ T5435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5451.501588][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5452.180375][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5469.279186][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5469.851310][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5510.688162][ T6003] hsr_slave_0: entered promiscuous mode
[ 5510.851040][ T6003] hsr_slave_1: entered promiscuous mode
[ 5511.079863][ T6003] debugfs: 'hsr0' already exists in 'hsr'
[ 5511.106792][ T6003] Cannot create hsr debugfs directory
[ 5535.121795][ T6009] hsr_slave_0: entered promiscuous mode
[ 5535.300160][ T6009] hsr_slave_1: entered promiscuous mode
[ 5535.435214][ T6009] debugfs: 'hsr0' already exists in 'hsr'
[ 5535.441917][ T6009] Cannot create hsr debugfs directory
[ 5579.446472][ T6003] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 5583.135494][ T6003] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 5587.906333][ T6003] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 5591.501082][ T6003] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 5606.390055][ T6009] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 5607.267574][ T6009] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 5607.991270][ T6009] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 5608.849246][ T6009] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 5647.732005][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5663.448166][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5703.646723][   T27] INFO: task syz.0.339:5988 blocked for more than 430 seconds.
[ 5703.745924][   T27]       Not tainted syzkaller #0
[ 5703.809480][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 5703.834164][   T27] task:syz.0.339       state:D stack:0     pid:5988  tgid:5988  ppid:5516   task_flags:0x400040 flags:0x00000019
[ 5703.836066][   T27] Call trace:
[ 5703.836637][   T27]  __switch_to+0x584/0xb20 (T)
[ 5703.840608][   T27]  __schedule+0x1eec/0x33a4
[ 5703.841198][   T27]  schedule+0xac/0x27c
[ 5703.841712][   T27]  schedule_timeout+0x5c/0x1e4
[ 5703.842148][   T27]  do_wait_for_common+0x28c/0x444
[ 5703.842640][   T27]  wait_for_completion+0x44/0x5c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 5704.019959][   T27]  __synchronize_srcu+0x2a4/0x320
[ 5704.020625][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 5704.021088][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 5704.021629][   T27]  kvm_put_kvm+0x6a0/0xfa8
[ 5704.022025][   T27]  kvm_vm_release+0x58/0x78
[ 5704.022501][   T27]  __fput+0x4ac/0x980
[ 5704.119078][   T27]  ____fput+0x20/0x58
[ 5704.119794][   T27]  task_work_run+0x1bc/0x254
[ 5704.120266][   T27]  do_notify_resume+0x1bc/0x270
[ 5704.120740][   T27]  el0_svc+0xb8/0x164
[ 5704.121171][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 5704.121617][   T27]  el0t_64_sync+0x198/0x19c
[ 5704.168012][   T27] 
[ 5704.168012][   T27] Showing all locks held in the system:
[ 5704.168672][   T27] 3 locks held by kworker/u4:0/12:
[ 5704.169290][   T27] 1 lock held by khungtaskd/27:
[ 5704.169682][   T27]  #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 5704.172010][   T27] 3 locks held by kworker/u4:3/42:
[ 5704.172514][   T27] 2 locks held by getty/3180:
[ 5704.287742][   T27]  #0: 13f0000011c468a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 5704.289660][   T27]  #1: 2cff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 5704.291382][   T27] 3 locks held by kworker/u4:1/3221:
[ 5704.291746][   T27] 2 locks held by syz-executor/3309:
[ 5704.292049][   T27] 2 locks held by kworker/u4:6/4139:
[ 5704.292367][   T27]  #0: 55f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 5704.416031][   T27]  #1: ffff80008cdb7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 5704.417790][   T27] 2 locks held by kworker/u4:12/4767:
[ 5704.418134][   T27]  #0: 55f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 5704.419813][   T27]  #1: ffff80008ce17c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 5704.421516][   T27] 3 locks held by kworker/u4:11/5435:
[ 5704.421885][   T27] 2 locks held by syz.1.338/5983:
[ 5704.422245][   T27] 3 locks held by kworker/u4:13/6138:
[ 5704.422573][   T27] 1 lock held by modprobe/6164:
[ 5704.524318][   T27] 2 locks held by dhcpcd/6165:
[ 5704.524765][   T27] 1 lock held by modprobe/6166:
[ 5704.575092][   T27] 
[ 5704.575566][   T27] =============================================
[ 5704.575566][   T27] 
[ 5704.576399][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 5704.583331][   T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[ 5704.584976][   T27] Hardware name: linux,dummy-virt (DT)
[ 5704.586060][   T27] Call trace:
[ 5704.587025][   T27]  show_stack+0x2c/0x3c (C)
[ 5704.588203][   T27]  __dump_stack+0x30/0x40
[ 5704.589191][   T27]  dump_stack_lvl+0x30/0x12c
[ 5704.590180][   T27]  dump_stack+0x1c/0x28
[ 5704.591129][   T27]  vpanic+0x22c/0x59c
[ 5704.592070][   T27]  vpanic+0x0/0x59c
[ 5704.592997][   T27]  hung_task_panic+0x0/0x2c
[ 5704.593991][   T27]  kthread+0x794/0x9a0
[ 5704.594995][   T27]  ret_from_fork+0x10/0x20
[ 5704.597004][   T27] Kernel Offset: disabled
[ 5704.597899][   T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f
[ 5704.599243][   T27] Memory Limit: none
[ 5704.601620][   T27] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:06:13  Registers:
info registers vcpu 0

CPU#0
 PC=ffff80008656fbfc X00=0000000000000000 X01=ffff8000870e1ad0
X02=0000000000000001 X03=ffff80008045dc6c X04=0000052ffc6399a8
X05=0000000000000001 X06=0000000000000000 X07=ffff8000804358c8
X08=ffff80008656fbf4 X09=0000000000000101 X10=0000000000ff0100
X11=0000000000000101 X12=0000000000000102 X13=000000000000008c
X14=00000000000000ff X15=00000000a4e14720 X16=000000004347125d
X17=0000000026fbfb69 X18=00000000435d4acd X19=0000000000000006
X20=ffff800087812800 X21=cdf000000d9b9d88 X22=00000000000000cd
X23=ffff8000876e1560 X24=ffff800087699c00 X25=0000000000000008
X26=ffff800087812800 X27=00000000000000cd X28=0000000000000028
X29=ffff800080007e40 X30=ffff80008059f25c  SP=ffff800080007e30
PSTATE=604020c9 -ZC- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=657362696c2f3436:62696c2f7273752f Z01=00312e6f732e7875:6e696c657362696c
Z02=0000000000000000:ffffff0000000000 Z03=0000000000000000:0000000000000000
Z04=3333333333333333:3333333333333333 Z05=0000000000000000:000000000c000000
Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000