last executing test programs:

2h0m10.726551231s ago: executing program 1 (id=160):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x94183, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000004000000000000000ad770081000000000800000000000000010000000000000002000000000000000300000000000000040000000000000032000000000000004000000000000000530000c400000000000080"], 0x80}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2h0m2.762661156s ago: executing program 1 (id=162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x40305839, 0x19)
r7 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871bcc8064f26b4d9164b6f1ccd7b4104002b5486580143226c0ead9a16c2709fafba2af023314cc4bf610d6a743ad4913910b8364e5fc1ebfc00", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r1, 0x500000d, 0x4d832, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r6, 0x40305839, 0x19) (async)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871bcc8064f26b4d9164b6f1ccd7b4104002b5486580143226c0ead9a16c2709fafba2af023314cc4bf610d6a743ad4913910b8364e5fc1ebfc00", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r1, 0x500000d, 0x4d832, 0xffffffffffffffff, 0x0) (async)

1h59m53.782772531s ago: executing program 1 (id=163):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) (rerun: 32)
ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000040)) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21)
close(0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xdddd1000, 0x2000, &(0x7f0000fa4000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 64)
r7 = eventfd2(0x7, 0x0)
write$eventfd(r7, &(0x7f0000000000)=0xc637, 0x8) (async, rerun: 64)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000540)=[{0x0, 0x0, 0x51c}], 0x1, 0x0, 0x0, 0x0) (rerun: 64)

1h59m43.667613489s ago: executing program 1 (id=165):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x7e)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4020ae46, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000080000000000", @ANYRES16, @ANYRES8=r5, @ANYRES16=r5])
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25)
ioctl$KVM_CAP_ARM_MTE(r11, 0x4068aea3, &(0x7f00000000c0)={0xf5})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)

1h58m58.022155898s ago: executing program 32 (id=165):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x7e)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4020ae46, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000080000000000", @ANYRES16, @ANYRES8=r5, @ANYRES16=r5])
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25)
ioctl$KVM_CAP_ARM_MTE(r11, 0x4068aea3, &(0x7f00000000c0)={0xf5})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)

1h39m25.347056553s ago: executing program 2 (id=345):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x2a, 0xe4, 0x1}})
r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c4f1, &(0x7f00000001c0)=0x3})

1h39m18.713697787s ago: executing program 2 (id=347):
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0) (async)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x6a3, 0xd}}, @hvc={0x32, 0x40, {0x84000010, [0x200, 0x8000000000000001, 0x80, 0x24ea8ff1, 0x3]}}], 0x70}, 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0x40086602, 0x3a)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010004a, 0x0})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010003a, &(0x7f0000000280)=0x30000000004}) (async)
ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010003a, &(0x7f0000000280)=0x30000000004})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) (async)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

1h39m15.613482041s ago: executing program 0 (id=348):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r3})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0xfffffffffffffffe)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)

1h39m3.529738581s ago: executing program 2 (id=349):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x5, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h39m3.404932434s ago: executing program 0 (id=350):
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) (async)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x2000000000001}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r10, 0x4004aec2, 0xffffffffffffffff)
syz_kvm_vgic_v3_setup(r1, 0x3, 0x200) (async)
syz_kvm_vgic_v3_setup(r1, 0x3, 0x200)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

1h38m54.384162685s ago: executing program 2 (id=351):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000180)=@arm64_fw={0x6030000000140002, &(0x7f0000000140)=0xffffffff00000000})
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c5a000/0x3000)=nil, r9, 0x0, 0x12, r8, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r11, 0x8, 0x13, r8, 0x0)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r12, 0x3, 0x11, r5, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r12, 0x3, 0x11, r10, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, <r15=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r15, 0x800454e0, 0x110c230000)
ioctl$KVM_CAP_PTP_KVM(r7, 0x4068aea3, &(0x7f0000000240))
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

1h38m52.361602422s ago: executing program 0 (id=352):
openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
close(0x3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
r4 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0x8004b709, 0x80002)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0xdddd0000, 0x2000, &(0x7f0000f1a000/0x2000)=nil})
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x410080, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
syz_kvm_vgic_v3_setup(r9, 0x2, 0x0)
close(r9)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfe000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000240)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x7})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10})
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r5, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)

1h38m43.054520303s ago: executing program 2 (id=353):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c5})
r4 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0xf81e, 0x200, 0x0})
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r12, 0xc008aeb0, 0xffffffffffffffff)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r13, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100028, &(0x7f0000000000)=0xfff})

1h38m39.225720674s ago: executing program 0 (id=354):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x4000, [0x1, 0x9, 0x3, 0x0, 0x600000]}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x1c, 0x9}}, @irq_setup={0x46, 0x18, {0x3, 0x2a1}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffe8, 0x10000, 0x5}}, @hvc={0x32, 0x40, {0x0, [0x100, 0x3, 0x5, 0x4]}}, @msr={0x14, 0x20, {0x603000000013f528, 0x9}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x468, 0x989, 0xa}}, @hvc={0x32, 0x40, {0xc4000011, [0x9, 0x10, 0x6, 0x9, 0x7]}}, @smc={0x1e, 0x40, {0x4, [0x7, 0x4209, 0x5, 0x2, 0x1ff]}}, @svc={0x122, 0x40, {0xf2003fe3, [0x91, 0x0, 0x5, 0x0, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0x5, 0x2, 0x0, 0x3}}, @svc={0x122, 0x40, {0xb6000009, [0x2, 0xd, 0x8, 0x0, 0x7fffffff]}}, @code={0xa, 0x9c, {"00c58ad200a0b0f2210180d2420080d2430180d2840080d2020000d4000820bc80c299d20020b0f2410080d2620180d2e30080d2e40180d2020000d40084000d000400b8000000f1602a98d20060b0f2010080d2020080d2830180d2440180d2020000d4e0f49dd200e0b0f2c10080d2a20180d2030180d2240080d2020000d4007008d500c0631e"}}, @code={0xa, 0xcc, {"e03085d200c0b8f2810180d2220080d2e30080d2640180d2020000d4e0ef9cd20040b0f2610180d2620080d2a30180d2e40080d2020000d4e05b87d200c0b0f2210180d2620080d2630180d2240180d2020000d4000008d5405790d20000b8f2e10080d2620180d2030180d2c40080d2020000d4a03f8cd200c0b0f2210180d2c20080d2a30180d2840080d2020000d4000020c80000809a000028d5402697d20020b8f2a10080d2e20080d2430180d2840080d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1c4}}], 0x408}, &(0x7f0000000480)=[@featur1={0x1, 0xac}], 0x1)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000940)={0x0, &(0x7f00000004c0)=[@its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x0, 0x1, 0x6, 0x4}}, @eret={0xe6, 0x18}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0x714, 0x9, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0x6, 0x7, 0x7}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x7d}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x6, 0x1533, 0x8, 0x1}}, @eret={0xe6, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1600, 0xffffffffffffffff, 0x2}}, @eret={0xe6, 0x18, 0x800}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0xfffffffffffffffe}}, @mrs={0xbe, 0x18, {0x6030000000138032}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x5, 0xb}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x10, 0x80000001}}, @smc={0x1e, 0x40, {0x80003fff, [0x6, 0x8, 0x4, 0xa]}}, @hvc={0x32, 0x40, {0x1000, [0xfffffffffffffff9, 0x8000, 0x6, 0x9, 0x8001]}}, @mrs={0xbe, 0x18, {0x603000000013f080}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0xbeb, 0x4, 0xf}}, @smc={0x1e, 0x40, {0xc4000005, [0x4, 0x6, 0x6, 0xf8c, 0x10000]}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @irq_setup={0x46, 0x18, {0x2, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0xd, 0x5a01, 0x7f, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x2, 0xf, 0x136, 0x9, 0x1}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x100000000}, @irq_setup={0x46, 0x18, {0x3, 0x120}}, @irq_setup={0x46, 0x18, {0x1, 0x72}}, @irq_setup={0x46, 0x18, {0x3, 0x33c}}, @smc={0x1e, 0x40, {0x84000053, [0x7, 0x8000000000000000, 0x3, 0x5, 0x9bd]}}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0xba, 0xe2, 0xc}}, @irq_setup={0x46, 0x18, {0x2, 0x69}}], 0x478}, &(0x7f0000000980)=[@featur1={0x1, 0x80}], 0x1)
ioctl$KVM_SET_REGS(r2, 0x4360ae82, &(0x7f00000009c0)={[0x8000, 0xd, 0x8000, 0x20000000, 0x2, 0x3, 0x1, 0xc6, 0x4, 0x9, 0xfffffffffffffffd, 0x10, 0x9aed, 0x1, 0x6, 0x5], 0x2000, 0x20000})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21)
ioctl$KVM_CAP_ARM_USER_IRQ(r3, 0x4068aea3, &(0x7f0000000a80))
r4 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000000b00))
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x31)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000c40)={0xc0, 0x0, 0x18000})
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000aaa000/0x400000)=nil)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000d00)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000cc0)={0xc1fb, 0x7fff, 0x1}})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000d40)={0x1fd, 0x1, 0x8000000, 0x2000, &(0x7f0000d6d000/0x2000)=nil, 0x81, r4})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000e00)={r4, 0x8, 0x0, r4})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000e40)={0x4, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, &(0x7f0000000e80))
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000f00)=@attr_pmu_init)
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000f40)={0x1fd, 0x0, 0xddd72000, 0x1000, &(0x7f0000d04000/0x1000)=nil, 0x5f, r4})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001000)={0x1, 0x10000, 0x8, r4, 0xd})
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000001040)={0x91110004, 0x12000})
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000010c0)=@attr_other={0x0, 0x4, 0x2, &(0x7f0000001080)=0x4})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000001100)=@attr_pmu_init)
ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000001540)={0x5, 0x40, 0x200, &(0x7f0000001140)=[0x8, 0x3, 0x2, 0x4, 0x9, 0x0, 0x9, 0x7, 0x1, 0x9, 0x1000, 0x8, 0xb, 0x3, 0x10, 0x7, 0x6, 0x3, 0x7, 0x101, 0x40000000, 0x4, 0x1c, 0x8, 0x9, 0xffff, 0x7, 0x8000, 0x3, 0x9, 0x7, 0x6, 0x4, 0x71, 0x1, 0xf38, 0x8, 0x1, 0xd, 0xffffffffffff2380, 0x81, 0x41cb, 0xacf8, 0xfffffffffffffffa, 0x1000, 0x1, 0x1, 0x6, 0x1, 0x4, 0x7f, 0xfff, 0x0, 0xc, 0x2, 0x1, 0x3, 0x0, 0xd276, 0xfffffffffffffffa, 0x9, 0xca2, 0x5, 0x2af6, 0x957, 0x7, 0x100000001, 0x3, 0x5, 0x2, 0x1, 0x7, 0xfffffffffffffffd, 0x7ff, 0x7f, 0x431, 0x0, 0x4, 0xdb3, 0x1e2, 0x7, 0x8, 0xffffffff, 0xa5, 0x10000, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffd, 0x6, 0x5, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x401, 0x100, 0x65, 0xd5bd, 0x3ff, 0xe, 0x7, 0x8, 0x80, 0x400, 0x80, 0x0, 0x3, 0x8, 0x4, 0x7, 0x0, 0x100000001, 0x7, 0x4, 0xfffffffffffffff2, 0x7, 0x3, 0x23, 0x6, 0x4, 0x5, 0x8, 0x1c, 0x9, 0x5, 0x3, 0x8001, 0x80]})
ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f00000015c0)=@attr_arm64={0x0, 0x7, 0x2, &(0x7f0000001580)=0x3e})
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1b)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000001600)={0xeeef0000, 0x9000})
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000001640)={0x5, 0x28})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000e79000/0x1000)=nil, r8, 0xd86915cd28bf7d65, 0x30, r2, 0x0)

1h38m33.224609999s ago: executing program 0 (id=355):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x2, 0x6, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x2a0}}, @svc={0x122, 0x40, {0x800, [0x814, 0xdada, 0xa, 0x40, 0x5]}}, @code={0xa, 0x9c, {"000000eb000008d5c00081d20080b0f2810080d2820080d2830080d2c40180d2020000d4e0d08cd20040b0f2010180d2c20080d2e30180d2e40080d2020000d4000008d50084600dc0fc9fd20080b0f2410180d2620080d2a30180d2040080d2020000d4000008d5008008d580cf8fd200c0b8f2410180d2420080d2430180d2240180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x80, 0xa}}, @eret={0xe6, 0x18, 0x100}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0xc00, [0x6, 0xcc5, 0x8, 0x1c4f, 0xfffffffffffffffc]}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x3d8}}, @irq_setup={0x46, 0x18, {0x0, 0x256}}, @mrs={0xbe, 0x18, {0x603000000013f201}}, @code={0xa, 0x6c, {"007008d5007008d5203799d20000b8f2810080d2220180d2830180d2a40080d2020000d4007008d500804088000000bca0d082d20020b8f2610080d2420180d2030180d2040180d2020000d4000028d5002c200e0040641e"}}, @mrs={0xbe, 0x18, {0x603000000013da11}}, @code={0xa, 0x84, {"0000403c007008d50088201e1f0000f1008008d5a0ac96d20040b8f2410180d2e20180d2230080d2e40180d2020000d420e68bd20060b0f2410080d2020180d2a30080d2640180d2020000d4007008d560a88ed20080b8f2610180d2220180d2a30080d2240080d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0x6a}, @irq_setup={0x46, 0x18, {0x3, 0x19c}}, @uexit={0x0, 0x18, 0xe}, @hvc={0x32, 0x40, {0xc400000c, [0x8, 0x10, 0x8, 0xcda8, 0x7ff]}}, @mrs={0xbe, 0x18, {0x603000000013e6ce}}, @irq_setup={0x46, 0x18, {0x1, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x8, 0x2}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e132, 0xfffffffffffffffd}}, @eret={0xe6, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013df58}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x767}, @irq_setup={0x46, 0x18, {0x2, 0x239}}, @svc={0x122, 0x40, {0x8400000e, [0x8, 0x0, 0x0, 0x8, 0x6]}}, @code={0xa, 0x54, {"000008d50044205e000008d5000008d50000803d000008d5008008d5007008d560c98ed200a0b0f2010080d2220180d2a30080d2240180d2020000d4000028d5"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0xe, 0x40, 0x2, 0x4}}], 0x580}, &(0x7f00000005c0)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000600)={0x5, 0x18}) (async)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r1, 0x8, 0x4000010, r0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r1, 0x1000004, 0x110, r2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000640)={0x1, 0x100000001}) (async)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000680)={0xd, 0xb23}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x101340, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000700)=[@hvc={0x32, 0x40, {0x1000, [0x6, 0x7, 0x4, 0x2, 0x20004]}}, @mrs={0xbe, 0x18, {0x603000000013f2b0}}, @code={0xa, 0xb4, {"007008d500eca02e20518bd200e0b8f2210180d2a20080d2c30180d2440080d2020000d4c09b9dd20040b0f2e10180d2e20080d2830180d2640180d2020000d4a0679fd20080b0f2810080d2c20180d2a30080d2840180d2020000d4c0db9ad20060b8f2e10080d2820080d2830180d2040080d2020000d440cb89d20060b8f2410080d2420080d2e30180d2040180d2020000d400dc202e0040ff0d00e4a07e"}}, @msr={0x14, 0x20, {0x603000000013c4f1, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0x0, 0x5, 0x3, 0x1}}, @hvc={0x32, 0x40, {0x80000002, [0xc0000, 0x5, 0xff, 0x6, 0x6]}}, @svc={0x122, 0x40, {0x800, [0x8, 0x40, 0x7fffffff, 0x7, 0x8]}}, @msr={0x14, 0x20, {0x6030000000130205, 0x8}}, @smc={0x1e, 0x40, {0x80000000, [0x2, 0x76f, 0x8, 0x3, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x0, 0x5, 0x5, 0x2}}, @code={0xa, 0xb4, {"c01b88d200c0b0f2410180d2820180d2630180d2640180d2020000d420368dd20040b8f2210180d2420180d2e30180d2c40080d2020000d4407b8fd200c0b0f2410180d2420080d2630180d2c40080d2020000d4010000d4a0b78fd20060b0f2410180d2020180d2630080d2a40180d2020000d4007008d500a8200e0000800cc06f97d20040b8f2410180d2e20080d2c30180d2040180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x8, 0x9}}, @msr={0x14, 0x20, {0x603000000013df10, 0x7}}, @code={0xa, 0x9c, {"0028c09a201096d20000b8f2e10080d2e20080d2230180d2840180d2020000d4e0b682d20040b8f2e10080d2020080d2c30180d2a40080d2020000d420c694d200a0b0f2210180d2e20080d2030080d2e40080d2020000d4007008d5000060c8008008d500084038609198d20000b8f2610180d2a20080d2630180d2a40180d2020000d4002c205e"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x2d, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xa, 0x6, 0x7ff, 0x3}}, @svc={0x122, 0x40, {0x1000000, [0x0, 0x401, 0x6f7, 0x7, 0x3]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x380}}, @smc={0x1e, 0x40, {0x86000001, [0x2, 0x2fa, 0xf661, 0x8, 0x2]}}, @code={0xa, 0x6c, {"00d8a17ec06095d200c0b0f2010080d2e20180d2830180d2240080d2020000d4008008d5007008d500a4ff0d000008d5404291d20080b0f2e10080d2e20180d2230180d2840080d2020000d4007008d5000028d5000028d5"}}, @svc={0x122, 0x40, {0x84000006, [0x7, 0x10, 0x4, 0x8, 0xffffffffffffffff]}}], 0x5a8}, &(0x7f0000000d00)=[@featur2={0x1, 0x20}], 0x1) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000d40)={0xb, <r6=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000dc0)=@attr_other={0x0, 0xfffffff7, 0xfff, &(0x7f0000000d80)=0x494d}) (async)
ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000e00)) (async)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000ec0)=0x187d) (async)
close(r6) (async)
syz_kvm_setup_cpu$arm64(r3, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001540)=[{0x0, &(0x7f0000000f00)=[@mrs={0xbe, 0x18, {0x603000000013e65b}}, @svc={0x122, 0x40, {0x80000000, [0x312f, 0x7, 0x6, 0x450f, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013df43}}, @mrs={0xbe, 0x18, {0x1ec7}}, @irq_setup={0x46, 0x18, {0x3, 0x202}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x2, 0x1, 0xdce7}}, @code={0xa, 0x9c, {"00fc205e00e19ad20020b8f2610080d2020180d2230180d2440180d2020000d400e4a07e407980d20020b0f2c10180d2220180d2a30180d2a40180d2020000d4000040d30088207ea0ab83d20040b0f2010080d2420180d2a30080d2c40080d2020000d40010805f00804088a0ee9cd20060b8f2e10180d2c20180d2630080d2640180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xe00, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x3, 0x2, 0x6, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013c708}}, @smc={0x1e, 0x40, {0x84000004, [0x3, 0x99fe, 0xa, 0x8000000000000001, 0x5]}}, @code={0xa, 0x9c, {"000008d560cd84d200e0b8f2a10180d2420180d2c30180d2c40080d2020000d4601189d200a0b8f2810080d2620080d2830180d2e40080d2020000d4000028d5c05796d20080b0f2c10180d2a20180d2630180d2440180d2020000d4007008d520f98ad20020b0f2410180d2420180d2830080d2240080d2020000d4000008d50060200e0088200e"}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0x84000000, [0x0, 0x3, 0xbc62, 0x0, 0xd]}}, @mrs={0xbe, 0x18, {0x6030000000138026}}, @code={0xa, 0x6c, {"007008d50060ff0d007008d500d290d200c0b8f2010180d2220180d2e30180d2e40080d2020000d4803686d200c0b0f2e10080d2420080d2030080d2440180d2020000d4000028d5007008d5007008d50040611e000008d5"}}, @uexit={0x0, 0x18, 0x15400}, @smc={0x1e, 0x40, {0x84000004, [0xff, 0x7, 0x400, 0x8000000000000000, 0x1000000000000000]}}, @svc={0x122, 0x40, {0x10, [0xd8, 0x5, 0x100, 0x38f97fe, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x10, 0x3, 0x5, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0xe, 0x8, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xfde0, 0xca3, 0x8e712d1e65548169}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x6, 0xb871, 0x3, 0x2}}, @eret={0xe6, 0x18, 0x3}, @code={0xa, 0x9c, {"007008d5007008d5a06084d20060b0f2e10080d2a20080d2830080d2640080d2020000d4007008d500a4c00d000010d580248ed20040b8f2a10080d2a20180d2630180d2240180d2020000d4000028d5002a89d200c0b0f2010080d2c20080d2e30080d2c40180d2020000d4809597d200e0b8f2e10080d2620080d2a30180d2440180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013f665}}, @msr={0x14, 0x20, {0x603000000013c2aa, 0x3}}, @smc={0x1e, 0x40, {0x1eeec912975038d9, [0x8, 0x4, 0x0, 0x0, 0x1]}}, @msr={0x14, 0x20, {0x603000000013dee4, 0x99}}], 0x618}], 0x1, 0x0, &(0x7f0000001580)=[@featur2={0x1, 0x41}], 0x1) (async)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fffffff)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) (async)
ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f00000015c0)={0x7, [0x93c2, 0x5, 0xffff, 0x3, 0x6, 0x8000000000000001, 0x3]}) (async)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000001600)={0x6, [0x6, 0xb45, 0xb7a, 0x45, 0x3ff, 0x0]}) (async)
ioctl$KVM_SET_REGS(r7, 0x4360ae82, &(0x7f0000001640)={[0x1, 0x169c0000000, 0x7, 0x3f7b, 0x6, 0x7, 0x1, 0x4, 0x200, 0x89, 0x7, 0x1724, 0x5, 0xff, 0x13f, 0x3], 0x0, 0x400}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000001700)={0x3000, 0x18000})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000001740)={0x1}) (async)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000001780)={0x4, 0x799})
ioctl$KVM_CAP_ARM_MTE(r8, 0x4068aea3, &(0x7f00000017c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1h38m32.201615389s ago: executing program 2 (id=356):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1000, 0x40000000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

1h37m46.960948886s ago: executing program 33 (id=355):
r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x2, 0x6, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x2a0}}, @svc={0x122, 0x40, {0x800, [0x814, 0xdada, 0xa, 0x40, 0x5]}}, @code={0xa, 0x9c, {"000000eb000008d5c00081d20080b0f2810080d2820080d2830080d2c40180d2020000d4e0d08cd20040b0f2010180d2c20080d2e30180d2e40080d2020000d4000008d50084600dc0fc9fd20080b0f2410180d2620080d2a30180d2040080d2020000d4000008d5008008d580cf8fd200c0b8f2410180d2420080d2430180d2240180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x80, 0xa}}, @eret={0xe6, 0x18, 0x100}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0xc00, [0x6, 0xcc5, 0x8, 0x1c4f, 0xfffffffffffffffc]}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x3d8}}, @irq_setup={0x46, 0x18, {0x0, 0x256}}, @mrs={0xbe, 0x18, {0x603000000013f201}}, @code={0xa, 0x6c, {"007008d5007008d5203799d20000b8f2810080d2220180d2830180d2a40080d2020000d4007008d500804088000000bca0d082d20020b8f2610080d2420180d2030180d2040180d2020000d4000028d5002c200e0040641e"}}, @mrs={0xbe, 0x18, {0x603000000013da11}}, @code={0xa, 0x84, {"0000403c007008d50088201e1f0000f1008008d5a0ac96d20040b8f2410180d2e20180d2230080d2e40180d2020000d420e68bd20060b0f2410080d2020180d2a30080d2640180d2020000d4007008d560a88ed20080b8f2610180d2220180d2a30080d2240080d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0x6a}, @irq_setup={0x46, 0x18, {0x3, 0x19c}}, @uexit={0x0, 0x18, 0xe}, @hvc={0x32, 0x40, {0xc400000c, [0x8, 0x10, 0x8, 0xcda8, 0x7ff]}}, @mrs={0xbe, 0x18, {0x603000000013e6ce}}, @irq_setup={0x46, 0x18, {0x1, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x8, 0x2}}, @uexit={0x0, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e132, 0xfffffffffffffffd}}, @eret={0xe6, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013df58}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x767}, @irq_setup={0x46, 0x18, {0x2, 0x239}}, @svc={0x122, 0x40, {0x8400000e, [0x8, 0x0, 0x0, 0x8, 0x6]}}, @code={0xa, 0x54, {"000008d50044205e000008d5000008d50000803d000008d5008008d5007008d560c98ed200a0b0f2010080d2220180d2a30080d2240180d2020000d4000028d5"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x0, 0xe, 0x40, 0x2, 0x4}}], 0x580}, &(0x7f00000005c0)=[@featur1={0x1, 0x40}], 0x1)
ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000600)={0x5, 0x18}) (async)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r1, 0x8, 0x4000010, r0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r1, 0x1000004, 0x110, r2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000640)={0x1, 0x100000001}) (async)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000680)={0xd, 0xb23}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x101340, 0x0) (async)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000700)=[@hvc={0x32, 0x40, {0x1000, [0x6, 0x7, 0x4, 0x2, 0x20004]}}, @mrs={0xbe, 0x18, {0x603000000013f2b0}}, @code={0xa, 0xb4, {"007008d500eca02e20518bd200e0b8f2210180d2a20080d2c30180d2440080d2020000d4c09b9dd20040b0f2e10180d2e20080d2830180d2640180d2020000d4a0679fd20080b0f2810080d2c20180d2a30080d2840180d2020000d4c0db9ad20060b8f2e10080d2820080d2830180d2040080d2020000d440cb89d20060b8f2410080d2420080d2e30180d2040180d2020000d400dc202e0040ff0d00e4a07e"}}, @msr={0x14, 0x20, {0x603000000013c4f1, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x1, 0x0, 0x5, 0x3, 0x1}}, @hvc={0x32, 0x40, {0x80000002, [0xc0000, 0x5, 0xff, 0x6, 0x6]}}, @svc={0x122, 0x40, {0x800, [0x8, 0x40, 0x7fffffff, 0x7, 0x8]}}, @msr={0x14, 0x20, {0x6030000000130205, 0x8}}, @smc={0x1e, 0x40, {0x80000000, [0x2, 0x76f, 0x8, 0x3, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x0, 0x5, 0x5, 0x2}}, @code={0xa, 0xb4, {"c01b88d200c0b0f2410180d2820180d2630180d2640180d2020000d420368dd20040b8f2210180d2420180d2e30180d2c40080d2020000d4407b8fd200c0b0f2410180d2420080d2630180d2c40080d2020000d4010000d4a0b78fd20060b0f2410180d2020180d2630080d2a40180d2020000d4007008d500a8200e0000800cc06f97d20040b8f2410180d2e20080d2c30180d2040180d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x8, 0x9}}, @msr={0x14, 0x20, {0x603000000013df10, 0x7}}, @code={0xa, 0x9c, {"0028c09a201096d20000b8f2e10080d2e20080d2230180d2840180d2020000d4e0b682d20040b8f2e10080d2020080d2c30180d2a40080d2020000d420c694d200a0b0f2210180d2e20080d2030080d2e40080d2020000d4007008d5000060c8008008d500084038609198d20000b8f2610180d2a20080d2630180d2a40180d2020000d4002c205e"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x2d, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xa, 0x6, 0x7ff, 0x3}}, @svc={0x122, 0x40, {0x1000000, [0x0, 0x401, 0x6f7, 0x7, 0x3]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x380}}, @smc={0x1e, 0x40, {0x86000001, [0x2, 0x2fa, 0xf661, 0x8, 0x2]}}, @code={0xa, 0x6c, {"00d8a17ec06095d200c0b0f2010080d2e20180d2830180d2240080d2020000d4008008d5007008d500a4ff0d000008d5404291d20080b0f2e10080d2e20180d2230180d2840080d2020000d4007008d5000028d5000028d5"}}, @svc={0x122, 0x40, {0x84000006, [0x7, 0x10, 0x4, 0x8, 0xffffffffffffffff]}}], 0x5a8}, &(0x7f0000000d00)=[@featur2={0x1, 0x20}], 0x1) (async)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000d40)={0xb, <r6=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000dc0)=@attr_other={0x0, 0xfffffff7, 0xfff, &(0x7f0000000d80)=0x494d}) (async)
ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000e00)) (async)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000ec0)=0x187d) (async)
close(r6) (async)
syz_kvm_setup_cpu$arm64(r3, 0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000001540)=[{0x0, &(0x7f0000000f00)=[@mrs={0xbe, 0x18, {0x603000000013e65b}}, @svc={0x122, 0x40, {0x80000000, [0x312f, 0x7, 0x6, 0x450f, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013df43}}, @mrs={0xbe, 0x18, {0x1ec7}}, @irq_setup={0x46, 0x18, {0x3, 0x202}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0x2, 0x1, 0xdce7}}, @code={0xa, 0x9c, {"00fc205e00e19ad20020b8f2610080d2020180d2230180d2440180d2020000d400e4a07e407980d20020b0f2c10180d2220180d2a30180d2a40180d2020000d4000040d30088207ea0ab83d20040b0f2010080d2420180d2a30080d2c40080d2020000d40010805f00804088a0ee9cd20060b8f2e10180d2c20180d2630080d2640180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xe00, 0x3, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x3, 0x2, 0x6, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013c708}}, @smc={0x1e, 0x40, {0x84000004, [0x3, 0x99fe, 0xa, 0x8000000000000001, 0x5]}}, @code={0xa, 0x9c, {"000008d560cd84d200e0b8f2a10180d2420180d2c30180d2c40080d2020000d4601189d200a0b8f2810080d2620080d2830180d2e40080d2020000d4000028d5c05796d20080b0f2c10180d2a20180d2630180d2440180d2020000d4007008d520f98ad20020b0f2410180d2420180d2830080d2240080d2020000d4000008d50060200e0088200e"}}, @eret={0xe6, 0x18, 0x6}, @svc={0x122, 0x40, {0x84000000, [0x0, 0x3, 0xbc62, 0x0, 0xd]}}, @mrs={0xbe, 0x18, {0x6030000000138026}}, @code={0xa, 0x6c, {"007008d50060ff0d007008d500d290d200c0b8f2010180d2220180d2e30180d2e40080d2020000d4803686d200c0b0f2e10080d2420080d2030080d2440180d2020000d4000028d5007008d5007008d50040611e000008d5"}}, @uexit={0x0, 0x18, 0x15400}, @smc={0x1e, 0x40, {0x84000004, [0xff, 0x7, 0x400, 0x8000000000000000, 0x1000000000000000]}}, @svc={0x122, 0x40, {0x10, [0xd8, 0x5, 0x100, 0x38f97fe, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x10, 0x3, 0x5, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0xe, 0x8, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xfde0, 0xca3, 0x8e712d1e65548169}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x6, 0xb871, 0x3, 0x2}}, @eret={0xe6, 0x18, 0x3}, @code={0xa, 0x9c, {"007008d5007008d5a06084d20060b0f2e10080d2a20080d2830080d2640080d2020000d4007008d500a4c00d000010d580248ed20040b8f2a10080d2a20180d2630180d2240180d2020000d4000028d5002a89d200c0b0f2010080d2c20080d2e30080d2c40180d2020000d4809597d200e0b8f2e10080d2620080d2a30180d2440180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013f665}}, @msr={0x14, 0x20, {0x603000000013c2aa, 0x3}}, @smc={0x1e, 0x40, {0x1eeec912975038d9, [0x8, 0x4, 0x0, 0x0, 0x1]}}, @msr={0x14, 0x20, {0x603000000013dee4, 0x99}}], 0x618}], 0x1, 0x0, &(0x7f0000001580)=[@featur2={0x1, 0x41}], 0x1) (async)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fffffff)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) (async)
ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f00000015c0)={0x7, [0x93c2, 0x5, 0xffff, 0x3, 0x6, 0x8000000000000001, 0x3]}) (async)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000001600)={0x6, [0x6, 0xb45, 0xb7a, 0x45, 0x3ff, 0x0]}) (async)
ioctl$KVM_SET_REGS(r7, 0x4360ae82, &(0x7f0000001640)={[0x1, 0x169c0000000, 0x7, 0x3f7b, 0x6, 0x7, 0x1, 0x4, 0x200, 0x89, 0x7, 0x1724, 0x5, 0xff, 0x13f, 0x3], 0x0, 0x400}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000001700)={0x3000, 0x18000})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000001740)={0x1}) (async)
r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000001780)={0x4, 0x799})
ioctl$KVM_CAP_ARM_MTE(r8, 0x4068aea3, &(0x7f00000017c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1h37m42.759396857s ago: executing program 34 (id=356):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1000, 0x40000000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

1h16m51.146772343s ago: executing program 4 (id=481):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7)
syz_kvm_add_vcpu$arm64(0x0, 0x0, &(0x7f0000000440)=[@featur1={0x1, 0x2a}], 0x1) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x3, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) (rerun: 64)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_assert_reg(r8, 0x4000000000e61b, 0x1) (async, rerun: 32)
ioctl$KVM_CREATE_VM(r3, 0x894c, 0x0) (async, rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x1}) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010003e, &(0x7f0000000240)=0x2fffffffffe}) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)

1h16m37.898978218s ago: executing program 4 (id=483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x122000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001480)={0xfdfd, 0x13000, 0x1})
ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x6, 0x2}})
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0xc4000053, [0xa, 0x1, 0xffffffffffffffff, 0xae13, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0xc2}}, @msr={0x14, 0x20, {0x603000000013c090, 0x9}}, @msr={0x14, 0x20, {0x603000000013df45, 0x8}}, @eret={0xe6, 0x18, 0xfffffffffffffc00}, @code={0xa, 0x6c, {"00e4007f40cc9cd20060b8f2010080d2e20080d2230180d2c40080d2020000d400fca05e40ef8ad20000b0f2610180d2c20180d2230180d2440080d2020000d4007008d50048200e0058200e0084205e00b0005f000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013de96}}, @uexit={0x0, 0x18, 0x101}], 0x174}, &(0x7f0000000480)=[@featur1={0x1, 0x10}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
close(0x4)
close(0x5)
r11 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140001})

1h16m22.582974414s ago: executing program 4 (id=486):
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0)
ioctl$KVM_CREATE_VM(r2, 0x5452, 0x2000fdfd)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f00000006c0)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xa0, 0x3, 0x6}}], 0x30}, 0x0, 0x0) (async)
r5 = eventfd2(0x0, 0x0)
close(r5) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x103801, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x3}) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = eventfd2(0x7, 0x1)
ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r10, 0x8})
write$eventfd(r10, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r13, 0x4000ae8d, &(0x7f0000000340)={0x5, 0x8}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1h16m11.794383016s ago: executing program 4 (id=488):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x8040aeb6, 0x0) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f00000000c0)=0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1h16m2.681871617s ago: executing program 4 (id=489):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r7, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000e88000/0x3000)=nil}) (async)
ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c024, &(0x7f00000000c0)}) (async)
r13 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f0000000040)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0})

1h15m25.216799009s ago: executing program 4 (id=492):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000080000000000", @ANYRES16, @ANYRES8=r1, @ANYRES16=r1])
r6 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000000)
close(r6)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x400380, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2000000000000000)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bde000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0xc4000053, [0x3, 0x4b8, 0x3, 0x3, 0xa]}}], 0x40}, 0x0, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x2)
r18 = syz_kvm_vgic_v3_setup(r17, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r18, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x300, &(0x7f0000000080)=0x4})
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r19 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x1, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_RUN(r19, 0xae80, 0x0)

1h14m36.562793709s ago: executing program 35 (id=492):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000000000000080000000000", @ANYRES16, @ANYRES8=r1, @ANYRES16=r1])
r6 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0x401c5820, 0x20000000)
close(r6)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x400380, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x25)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2000000000000000)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bde000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@smc={0x1e, 0x40, {0xc4000053, [0x3, 0x4b8, 0x3, 0x3, 0xa]}}], 0x40}, 0x0, 0x0)
r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x2)
r18 = syz_kvm_vgic_v3_setup(r17, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r18, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x300, &(0x7f0000000080)=0x4})
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r19 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x1, 0xa}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x100)
ioctl$KVM_RUN(r19, 0xae80, 0x0)

55m16.771493916s ago: executing program 3 (id=614):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c00b}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

55m8.683495623s ago: executing program 5 (id=615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b10000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
r8 = eventfd2(0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, 0x0)
close(r8)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r8, &(0x7f0000000180)=0x5, 0xfffffde3)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

55m6.393303257s ago: executing program 3 (id=616):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1})
r5 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x9ce, 0x9, 0x4}}], 0x30}, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x80a2000, 0x1000})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f00000000c0)={0xffff1000, 0x6000, 0x1})

54m50.735381537s ago: executing program 5 (id=617):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013e7fc, 0x8003}}], 0x20}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r9 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x78, 0x0})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x0, 0x0, 0x9032, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000eae000/0x3000)=nil, 0x0, 0x1000000, 0x810, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)

54m49.563283457s ago: executing program 3 (id=618):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x94800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x100010, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x680, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000200)=@arm64_fw={0x6030000000140000, &(0x7f0000000240)=0x10001})
r11 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000140)=[@featur2={0x1, 0x32}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000000)=ANY=[])
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r5, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc001, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
r16 = syz_kvm_vgic_v3_setup(r14, 0x6, 0x60)
ioctl$KVM_GET_DEVICE_ATTR(r16, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x800000000208, &(0x7f00000004c0)=0x1})

54m34.149855353s ago: executing program 3 (id=619):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x9}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x3ff, 0x79, 0x1}}], 0x50}, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000000)=0x1)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r6, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0xb, 0x11, r6, 0x0)
syz_kvm_assert_syzos_uexit$arm64(r9, 0xffffffffffffffff)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0x541b, 0xac)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x80, 0xb9, '\x00', 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d)
r13 = eventfd2(0x0, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000080)={r13, 0x8, 0x1})
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e6000000000000001800000000000000020000000000000000000000000000001800000000000000090000000000000082000000000000002800000000000000010000000000000001000000000000002602000000000000220100000000000040000000000000000008a11d88647545f619f19c0000000000000300000000000000040000000000000008000000000000000600000000000000000400000000000032000000000000004000000000000000000000840000000008000000000000000500000000000000000000000100010000000000320000000000000040000000000000000b040084000000008000000000ec58a25379e5c6430000000700000000000000010100000000000001000000000000006e00000000000000300000000000000000000008000000005000000000000000abbf0000000000000400000000000000aa0000000000000028000000000000000f000000000008000000080000000200000003000000000000000000000000001800000000000000a9040000000000001400000000000000200000000000000018c51300000030600500000000000000aa0000000000000028000000000000000f00010000000a000000ac0000004c000000030000000000000000000000000018000000000000000300"/498], 0x1e8}], 0x1, 0x0, &(0x7f0000000140)=[@featur2={0x1, 0x23}], 0x1)

54m33.474493902s ago: executing program 5 (id=620):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x7fffffffffffffff}) (async, rerun: 64)
ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x3) (async, rerun: 64)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 64)
r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (rerun: 64)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0xe, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_REGS(r9, 0x4360ae82, &(0x7f0000000200)={[0xaf, 0x7, 0x1, 0x8, 0xd, 0x7, 0x9, 0x9, 0x5, 0x6, 0x3, 0x100, 0x8000, 0x1, 0x1, 0x7f], 0x21000, 0x10000}) (async)
write$eventfd(r13, &(0x7f00000001c0)=0x1, 0x11)

54m21.221889874s ago: executing program 3 (id=621):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8521, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000000c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(0x5)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000edf000/0x3000)=nil, r8, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f00000002c0)={0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

54m20.215900377s ago: executing program 5 (id=622):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0)
r14 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r15, 0x8, 0x13, r7, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r15, 0x1000001, 0x12, r7, 0x0)
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r16, 0x3, 0x11, r6, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r16, 0x1000007, 0x810, r14, 0x0)

54m10.805693899s ago: executing program 3 (id=623):
openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013dea8}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x80010, r3, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r6 = eventfd2(0xedb2, 0x80001)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r9, 0xb})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r9, 0x3})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x3, r9})
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}], 0x18}, 0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)=0x1b})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

54m6.586293051s ago: executing program 5 (id=624):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 32)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (rerun: 32)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000000)={0xe, 0x9})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0xf)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x287, 0x0})

53m56.481230924s ago: executing program 5 (id=625):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x6020000000110005, &(0x7f0000000000)=0x9})

53m24.112782195s ago: executing program 36 (id=623):
openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013dea8}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x80010, r3, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r6 = eventfd2(0xedb2, 0x80001)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r9, 0xb})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r9, 0x3})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x3, r9})
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013dce9}}], 0x18}, 0x0, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)=0x1b})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

53m8.71394353s ago: executing program 37 (id=625):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x6020000000110005, &(0x7f0000000000)=0x9})

44m24.997865531s ago: executing program 7 (id=637):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0x80000002, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000680)=[@mrs={0xbe, 0x18, {0x603000000013c800}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, <r14=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

44m11.219945255s ago: executing program 6 (id=638):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x8})
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
r6 = eventfd2(0xd, 0x1)
close(r6)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
write$eventfd(r6, 0x0, 0x500)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

43m56.730967885s ago: executing program 7 (id=639):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0x401054d6, 0x1) (async)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0xffffffffffffffff)

43m52.962832027s ago: executing program 6 (id=640):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x5, 0x800)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r8, 0x8})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x1, 0x0, 0x0, r8, 0xf})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r10 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[@code={0xa, 0x84, {"007008d500eb93d20080b0f2c10180d2220180d2c30180d2c40180d2020000d4000020eba0db84d20000b8f2c10080d2820080d2230180d2840080d2020000d40034202e0008601e0040202e1f00006b0018200e20b084d20040b8f2c10180d2620180d2830180d2240180d2020000d4"}}, @svc={0x122, 0x40, {0x84000002, [0x5, 0x10001, 0x1, 0x900000000, 0x3]}}, @irq_setup={0x46, 0x18, {0x0, 0x151}}, @irq_setup={0x46, 0x18, {0x0, 0x33e}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x343}}, @mrs={0xbe, 0x18, {0x603000000013df6f}}, @smc={0x1e, 0x40, {0x84000011, [0x1, 0x1ff, 0x84f3, 0x1, 0x9]}}, @hvc={0x32, 0x40, {0x86000000, [0x6, 0x8001, 0x1, 0xffff, 0x1858bbe5]}}, @uexit={0x0, 0x18, 0x1}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x1, 0x9}}, @irq_setup={0x46, 0x18, {0x2, 0xae}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x4, 0x3, 0xd, 0x9, 0x1}}, @smc={0x1e, 0x40, {0x0, [0x6, 0xff, 0xb, 0xdba, 0x1fd3]}}, @code={0xa, 0x9c, {"007008d560f984d200c0b8f2010080d2420080d2430080d2040180d2020000d40084a00d00000033000008d50054002f007008d580d098d200a0b8f2610080d2e20180d2c30080d2a40180d2020000d4802d83d200a0b8f2010080d2420080d2430180d2a40180d2020000d4e0ac87d200c0b8f2210080d2020180d2030180d2c40180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x309}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0xae}}, @irq_setup={0x46, 0x18, {0x0, 0x13f}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x3, 0xa, 0xd, 0x49d, 0x3}}, @hvc={0x32, 0x40, {0xc400000d, [0x8, 0x78, 0x7, 0x7, 0x4]}}, @code={0xa, 0x54, {"e00300b2007008d5008008d50000639e0058602e007008d50020df0dc09f94d20060b8f2810180d2a20180d2630080d2240080d2020000d4000860fc0058602e"}}, @msr={0x14, 0x20, {0x603000000013deae, 0x7}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x10, 0xe, 0xf6}}, @mrs={0xbe, 0x18, {0x603000000013df64}}, @hvc={0x32, 0x40, {0x84000000, [0x1, 0xa, 0x8000000000000001, 0x5, 0xb00000]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x400, 0xd0, 0x3}}], 0x50c}, &(0x7f0000000780)=[@featur2={0x1, 0xaa}], 0x1)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r14, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb0000/0x4000)=nil, r15, 0x1, 0x80010, r10, 0x1000000)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x88, &(0x7f0000000000)=0x10})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1})
syz_kvm_setup_cpu$arm64(r0, r1, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e0000000000000030000000000000000000dddd0080"], 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

43m39.751259746s ago: executing program 7 (id=641):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r5, 0x2, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
r8 = ioctl$KVM_CREATE_VM(r7, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0x8004b706, 0x0)

43m28.091516286s ago: executing program 6 (id=642):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x67, 0x5, &(0x7f0000000300)=0xb})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0x4020940d, 0xfffffffffffff4c2)
r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000240)=[@featur2={0x1, 0x2}], 0x34)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0x80111500, 0x20000000)
write$eventfd(r9, &(0x7f0000000100)=0x10, 0x8)
munmap(&(0x7f0000008000/0x1000)=nil, 0x200000)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x221, 0x38e}})
r14 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000180)={0x8, <r15=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x4})
syz_kvm_add_vcpu$arm64(r7, &(0x7f00000001c0)={0x0, 0x0, 0xfd0e}, &(0x7f0000000200)=[@featur1={0x1, 0x41}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r12, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x48c, 0x1, &(0x7f0000000080)=0x7})
r16 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r16, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0)

43m20.412330545s ago: executing program 7 (id=643):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013dce5}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r9 = mmap$KVM_VCPU(&(0x7f0000ee6000/0x1000)=nil, r8, 0xb, 0x11, r7, 0x40000)
syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000000080)="173ea04e539f083b583a50e00fc16c4b72bd83875fa60766", 0x0, 0x18)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@mrs={0xbe, 0x18, {0x603000000013dce5}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000ee6000/0x1000)=nil, r8, 0xb, 0x11, r7, 0x40000) (async)
syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000000080)="173ea04e539f083b583a50e00fc16c4b72bd83875fa60766", 0x0, 0x18) (async)

43m3.041142891s ago: executing program 6 (id=644):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2c)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000})
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000f54000/0x4000)=nil, 0x0, 0x2000002, 0x4000010, r2, 0x0)
r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f0000000100)=@arm64_fp={0x604000000010008c, &(0x7f0000000000)=0x400000000000006})
syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000000c0), 0x1)

42m57.551115192s ago: executing program 7 (id=645):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f000099b000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc, 0xbdb4, 0x7}}], 0x30}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x100)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x7, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000200)=0x8000000})
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x2, 0x1, &(0x7f0000000080)=0x9})
ioctl$KVM_IRQ_LINE(r1, 0x5452, &(0x7f0000000100)={0x1000020, 0x1})

42m32.342162462s ago: executing program 6 (id=646):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7})

42m30.545650627s ago: executing program 7 (id=647):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f00000000c0)="9ff90d8d766e1116fb10926dd7256de4b19d3d270a571d6c", 0x0, 0x18)
r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x7fffffff, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x58}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r15 = ioctl$KVM_GET_STATS_FD_cpu(r12, 0xaece)
r16 = ioctl$KVM_GET_STATS_FD_cpu(r15, 0xaece)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x1ca}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa}})

42m16.462113842s ago: executing program 6 (id=648):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x40000c8, 0x3})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0xf0b97824dd2ed4e2, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r6, &(0x7f00000001c0)=0x9, 0x1d)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010003a, &(0x7f0000000280)=0x30000000004})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a9a000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x84, {"008008d50004000f007c009bc04283d20000b8f2010080d2020180d2e30080d2440180d2020000d400408ad200c0b8f2010180d2020080d2630080d2c40080d2020000d4007008d5000028d500e59fd200c0b0f2a10180d2620180d2630180d2c40080d2020000d400fc002f0014c05a"}}], 0x84}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x240)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x18b080, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xc0189436, 0x20004000)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r16, 0xae03, 0xac)
ioctl$KVM_CREATE_GUEST_MEMFD(r14, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x6f5a})
mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, 0x930, 0x3000001, 0x12, 0xffffffffffffffff, 0x0)

41m41.974186262s ago: executing program 38 (id=647):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f00000000c0)="9ff90d8d766e1116fb10926dd7256de4b19d3d270a571d6c", 0x0, 0x18)
r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x7fffffff, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x58}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
r15 = ioctl$KVM_GET_STATS_FD_cpu(r12, 0xaece)
r16 = ioctl$KVM_GET_STATS_FD_cpu(r15, 0xaece)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x1ca}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa}})

41m25.171030897s ago: executing program 39 (id=648):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x40000c8, 0x3})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0xf0b97824dd2ed4e2, <r6=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r6, &(0x7f00000001c0)=0x9, 0x1d)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010003a, &(0x7f0000000280)=0x30000000004})
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a9a000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x84, {"008008d50004000f007c009bc04283d20000b8f2010080d2020180d2e30080d2440180d2020000d400408ad200c0b8f2010180d2020080d2630080d2c40080d2020000d4007008d5000028d500e59fd200c0b0f2a10180d2620180d2630180d2c40080d2020000d400fc002f0014c05a"}}], 0x84}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x240)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x18b080, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xc0189436, 0x20004000)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x31)
ioctl$KVM_CHECK_EXTENSION_VM(r16, 0xae03, 0xac)
ioctl$KVM_CREATE_GUEST_MEMFD(r14, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x6f5a})
mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, 0x930, 0x3000001, 0x12, 0xffffffffffffffff, 0x0)

13m44.051875795s ago: executing program 9 (id=744):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000480)=@arm64_fw={0x6030000000140000, &(0x7f0000000440)=0xdd})
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r6, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]})
close(r1)

13m38.143202526s ago: executing program 8 (id=745):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013c00b}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xa5)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x404400, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x401]}}], 0x40}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r14, 0x2000003, 0x11, r13, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r15 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r17, 0x4068aea3, &(0x7f00000004c0)={0xdf, 0x0, 0x8000})
syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
close(0x4)
close(0x5)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000180)=@arm64_fp={0x6040000000100076, &(0x7f0000000000)=0x3})

13m24.099125498s ago: executing program 9 (id=746):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x287, 0x0})

13m3.911769933s ago: executing program 8 (id=747):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xe4, 0x0, 0x7})
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010002e, &(0x7f0000000000)=0xec1})
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c61000/0x3000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0)

13m2.87968498s ago: executing program 9 (id=748):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001})
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_extra={0x603000000013df01, &(0x7f0000000000)=0x2})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a82616})
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@memwrite={0x6e, 0x0, @vgic_gicr={0x80e0000, 0x280, 0x3ff, 0xf}}], 0xfff6}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04)

12m49.114220378s ago: executing program 8 (id=749):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x301000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x8})
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r6, 0x4010aeab, &(0x7f0000000000)={0x7fffffff, 0x8000001})
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000512000/0x3000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
mmap$KVM_VCPU(&(0x7f00004d2000/0x3000)=nil, r9, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)

12m28.864493675s ago: executing program 9 (id=750):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0xffffffffffffffff)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013df61}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0xb, 0x11, r2, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)

12m16.906975639s ago: executing program 8 (id=751):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x7fffffffffffffff})

12m5.204678968s ago: executing program 9 (id=752):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x10}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000300)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r10, 0x4020ae46, &(0x7f00000001c0)=ANY=[])
syz_kvm_setup_cpu$arm64(r10, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x18b080, 0x0)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

12m2.784584419s ago: executing program 8 (id=753):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000240)={0x0, 0x5ded})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r8 = syz_kvm_vgic_v3_setup(r7, 0x2, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x4, &(0x7f00000000c0)=0x8})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
close(r1)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000eb4000/0x3000)=nil, 0x3000)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r10, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)

11m29.739419849s ago: executing program 9 (id=754):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) (async)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x2000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r12, 0x400454d4, 0x110c230008)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x30000})
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11m28.575279908s ago: executing program 8 (id=755):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x5, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x5}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async)

10m43.133418444s ago: executing program 40 (id=754):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) (async)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x2000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r12, 0x400454d4, 0x110c230008)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x30000})
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8}) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10m37.271614853s ago: executing program 41 (id=755):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x5, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x5}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async)

1m16.251983997s ago: executing program 1 (id=756):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000dc1000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)

1m5.155694354s ago: executing program 0 (id=757):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
munmap(&(0x7f0000ea2000/0x1000)=nil, 0x1000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e22ffff)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r1, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e227ffe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000000000010001000200000001000000000000000b000000000000000300000009000000000000000000000000000000000200002a00000004000000030000000000000006000000010000000000000000000000000000000000000000000000000000000400000003000000000000000000000009000000090000008a000000aff4000000000000000000000000000000000000ff000000020000000100000000000000feffffff05000000000000000000000000000000000000000000010000000000000000000000090000000300"/238])
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000004, 0x6, 0x2}})

45.684903332s ago: executing program 1 (id=758):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16.722181285s ago: executing program 42 (id=757):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
munmap(&(0x7f0000ea2000/0x1000)=nil, 0x1000)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e22ffff)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0)
r1 = eventfd2(0xfffffffa, 0x80001)
write$eventfd(r1, 0x0, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e227ffe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1})
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000000000010001000200000001000000000000000b000000000000000300000009000000000000000000000000000000000200002a00000004000000030000000000000006000000010000000000000000000000000000000000000000000000000000000400000003000000000000000000000009000000090000008a000000aff4000000000000000000000000000000000000ff000000020000000100000000000000feffffff05000000000000000000000000000000000000000000010000000000000000000000090000000300"/238])
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000004, 0x6, 0x2}})

0s ago: executing program 43 (id=758):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}, @msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[  389.532215][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.109451][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:36308' (ED25519) to the list of known hosts.
[  605.443748][   T25] audit: type=1400 audit(604.650:60): avc:  denied  { name_bind } for  pid=3325 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  607.326912][   T25] audit: type=1400 audit(606.540:61): avc:  denied  { execute } for  pid=3326 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  607.359849][   T25] audit: type=1400 audit(606.580:62): avc:  denied  { execute_no_trans } for  pid=3326 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  628.629354][   T25] audit: type=1400 audit(627.850:63): avc:  denied  { mounton } for  pid=3326 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  628.687126][   T25] audit: type=1400 audit(627.900:64): avc:  denied  { mount } for  pid=3326 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  628.769985][ T3326] cgroup: Unknown subsys name 'net'
[  628.839393][   T25] audit: type=1400 audit(628.060:65): avc:  denied  { unmount } for  pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  629.315391][ T3326] cgroup: Unknown subsys name 'cpuset'
[  629.448358][ T3326] cgroup: Unknown subsys name 'rlimit'
[  630.410311][   T25] audit: type=1400 audit(629.630:66): avc:  denied  { setattr } for  pid=3326 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  630.430233][   T25] audit: type=1400 audit(629.640:67): avc:  denied  { mounton } for  pid=3326 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  630.459406][   T25] audit: type=1400 audit(629.670:68): avc:  denied  { mount } for  pid=3326 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  631.918690][ T3330] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  631.957013][   T25] audit: type=1400 audit(631.150:69): avc:  denied  { relabelto } for  pid=3330 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  631.987853][   T25] audit: type=1400 audit(631.170:70): avc:  denied  { write } for  pid=3330 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  632.180238][   T25] audit: type=1400 audit(631.400:71): avc:  denied  { read } for  pid=3326 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  632.199003][   T25] audit: type=1400 audit(631.410:72): avc:  denied  { open } for  pid=3326 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  632.249902][ T3326] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  685.696604][   T25] audit: type=1400 audit(684.910:73): avc:  denied  { execmem } for  pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  690.135903][   T25] audit: type=1400 audit(689.350:74): avc:  denied  { read } for  pid=3333 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.153744][   T25] audit: type=1400 audit(689.370:75): avc:  denied  { open } for  pid=3333 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  690.242555][   T25] audit: type=1400 audit(689.460:76): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  690.522284][   T25] audit: type=1400 audit(689.720:77): avc:  denied  { module_request } for  pid=3333 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  691.472267][   T25] audit: type=1400 audit(690.690:78): avc:  denied  { sys_module } for  pid=3334 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  717.948337][ T3333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  718.030407][ T3334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  718.101246][ T3333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.307028][ T3334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.987809][ T3333] hsr_slave_0: entered promiscuous mode
[  730.016775][ T3333] hsr_slave_1: entered promiscuous mode
[  730.831780][ T3334] hsr_slave_0: entered promiscuous mode
[  730.880999][ T3334] hsr_slave_1: entered promiscuous mode
[  730.929080][ T3334] debugfs: 'hsr0' already exists in 'hsr'
[  730.937740][ T3334] Cannot create hsr debugfs directory
[  736.312521][   T25] audit: type=1400 audit(735.530:79): avc:  denied  { create } for  pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  736.367672][   T25] audit: type=1400 audit(735.570:80): avc:  denied  { write } for  pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  736.409100][   T25] audit: type=1400 audit(735.620:81): avc:  denied  { read } for  pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  736.611740][ T3333] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  737.021322][ T3333] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  737.282741][ T3333] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  737.582327][ T3333] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  739.112022][ T3334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  739.243372][ T3334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  739.391323][ T3334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  739.609671][ T3334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  751.831947][ T3333] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.580246][ T3334] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.659765][ T3333] veth0_vlan: entered promiscuous mode
[  806.211076][ T3333] veth1_vlan: entered promiscuous mode
[  808.257371][ T3334] veth0_vlan: entered promiscuous mode
[  808.493282][ T3333] veth0_macvtap: entered promiscuous mode
[  808.821929][ T3333] veth1_macvtap: entered promiscuous mode
[  809.010845][ T3334] veth1_vlan: entered promiscuous mode
[  811.396756][ T3382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.418043][ T3382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.602022][ T3382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.608189][ T3382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.682921][ T3334] veth0_macvtap: entered promiscuous mode
[  812.061710][ T3334] veth1_macvtap: entered promiscuous mode
[  814.013935][   T25] audit: type=1400 audit(813.230:82): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  814.193913][   T25] audit: type=1400 audit(813.410:83): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/syzkaller.8imt8T/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  814.386630][   T25] audit: type=1400 audit(813.600:84): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  814.875391][   T25] audit: type=1400 audit(814.080:85): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/syzkaller.8imt8T/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  814.927654][ T3437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.983532][ T3437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.989442][ T3437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.058248][ T3437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.151319][   T25] audit: type=1400 audit(814.370:86): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/syzkaller.8imt8T/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  815.610455][   T25] audit: type=1400 audit(814.800:87): avc:  denied  { unmount } for  pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  815.899661][   T25] audit: type=1400 audit(815.060:88): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  816.049388][   T25] audit: type=1400 audit(815.250:89): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="gadgetfs" ino=3803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  816.462121][   T25] audit: type=1400 audit(815.680:90): avc:  denied  { mount } for  pid=3333 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  816.567032][   T25] audit: type=1400 audit(815.780:91): avc:  denied  { mounton } for  pid=3333 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  818.314004][ T3333] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  819.977996][   T25] kauditd_printk_skb: 1 callbacks suppressed
[  819.978798][   T25] audit: type=1400 audit(819.180:93): avc:  denied  { read write } for  pid=3333 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  820.056647][   T25] audit: type=1400 audit(819.260:94): avc:  denied  { open } for  pid=3333 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  820.096248][   T25] audit: type=1400 audit(819.290:95): avc:  denied  { ioctl } for  pid=3333 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  831.287123][   T25] audit: type=1400 audit(830.490:96): avc:  denied  { read } for  pid=3485 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  831.375647][   T25] audit: type=1400 audit(830.580:97): avc:  denied  { open } for  pid=3485 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  832.105494][   T25] audit: type=1400 audit(831.310:98): avc:  denied  { ioctl } for  pid=3485 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  837.569525][   T25] audit: type=1400 audit(836.770:99): avc:  denied  { execute } for  pid=3487 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  845.058712][   T25] audit: type=1400 audit(844.220:100): avc:  denied  { write } for  pid=3494 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  861.549104][   T25] audit: type=1400 audit(860.760:101): avc:  denied  { setattr } for  pid=3506 comm="syz.0.7" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  880.530557][   T25] audit: type=1400 audit(879.750:102): avc:  denied  { map } for  pid=3516 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1008.089711][   T25] audit: type=1400 audit(1007.310:103): avc:  denied  { append } for  pid=3579 comm="syz.1.29" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1070.486110][   T25] audit: type=1400 audit(1069.690:104): avc:  denied  { execute } for  pid=3617 comm="syz.0.38" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1154.700079][ T3653] kvm [3653]: Failed to find VMA for hva 0x20c01000
[ 1154.739349][ T3652] kvm [3652]: Failed to find VMA for hva 0x20c01000
[ 1209.010916][   T25] audit: type=1400 audit(1208.200:105): avc:  denied  { create } for  pid=3696 comm="syz.1.61" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1216.442052][ T3699] KVM: debugfs: duplicate directory 3699-10
[ 1230.499085][ T3706] kvm [3704]: Unsupported guest access at: eeef0000
[ 1230.499085][ T3706]  { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write },
[ 1231.749472][ T3706] kvm [3706]: Failed to find VMA for hva 0x20d8d000
[ 1245.996610][   T25] audit: type=1400 audit(1245.150:106): avc:  denied  { map } for  pid=3717 comm="syz.1.68" path="pipe:[2799]" dev="pipefs" ino=2799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 1256.949962][ T3725] kvm [3725]: Failed to find VMA for hva 0x21016000
[ 1333.820825][   T25] audit: type=1400 audit(1333.040:107): avc:  denied  { map } for  pid=3772 comm="syz.0.81" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=8729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1333.882130][   T25] audit: type=1400 audit(1333.100:108): avc:  denied  { read } for  pid=3772 comm="syz.0.81" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=8729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1388.212387][ T3805] kvm [3805]: Failed to find VMA for hva 0x20c01000
[ 1399.216754][ T3812] debugfs: 'vgic-its-state@8080000' already exists in '3812-4'
[ 1414.579942][ T3820] debugfs: 'vgic-its-state@8080000' already exists in '3820-8'
[ 1456.412840][   T25] audit: type=1400 audit(1455.620:109): avc:  denied  { ioctl } for  pid=3852 comm="syz.1.107" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1510.772028][ T3875] kvm [3875]: Failed to find VMA for hva 0x20e51000
[ 1630.058318][   T25] audit: type=1400 audit(1629.270:110): avc:  denied  { ioctl } for  pid=3940 comm="syz.1.137" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=11719 ioctlcmd=0xaeae scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1708.739361][ T3987] kvm [3987]: Failed to find VMA for hva 0x20e51000
[ 1821.730781][ T3380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1823.040812][ T3380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1824.482155][ T3380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1826.153980][ T3380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.759525][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1847.081383][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1847.329061][ T3380] bond0 (unregistering): Released all slaves
[ 1849.707561][ T3380] hsr_slave_0: left promiscuous mode
[ 1849.798240][ T3380] hsr_slave_1: left promiscuous mode
[ 1850.609378][ T3380] veth1_macvtap: left promiscuous mode
[ 1850.612039][ T3380] veth0_macvtap: left promiscuous mode
[ 1850.640191][ T3380] veth1_vlan: left promiscuous mode
[ 1850.662028][ T3380] veth0_vlan: left promiscuous mode
[ 1920.768068][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1921.130939][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1943.529385][ T4054] hsr_slave_0: entered promiscuous mode
[ 1943.612446][ T4054] hsr_slave_1: entered promiscuous mode
[ 1959.590442][ T4054] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1960.101624][ T4054] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1960.588652][ T4054] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1961.206947][ T4054] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1991.287554][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2094.842971][ T4054] veth0_vlan: entered promiscuous mode
[ 2095.889161][ T4054] veth1_vlan: entered promiscuous mode
[ 2099.550025][ T4054] veth0_macvtap: entered promiscuous mode
[ 2100.103052][ T4054] veth1_macvtap: entered promiscuous mode
[ 2103.893496][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2103.950941][ T4062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2104.006934][ T4062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2104.024130][ T4062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2247.216943][ T4364] kvm [4364]: Failed to find VMA for hva 0x20d8d000
[ 2257.193167][   T25] audit: type=1400 audit(2256.410:111): avc:  denied  { execute } for  pid=4375 comm="syz.0.218" path="/122/T" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2452.949636][ T4492] kvm [4491]: Unsupported guest access at: eeef0000
[ 2452.949636][ T4492]  { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write },
[ 2453.759929][ T4492] kvm [4492]: Failed to find VMA for hva 0x20d8d000
[ 2664.439249][ T4602] kvm [4602]: Failed to find VMA for hva 0x20e51000
[ 2792.812034][ T4676] kvm [4676]: Failed to find VMA for hva 0x20c01000
[ 2918.015843][   T25] audit: type=1400 audit(2917.230:112): avc:  denied  { map } for  pid=4740 comm="syz.2.333" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 3119.418747][ T4084] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3120.958025][ T4084] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3121.760020][ T4084] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3122.982868][ T4084] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3136.803286][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3136.883881][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3136.967508][ T4084] bond0 (unregistering): Released all slaves
[ 3138.609243][ T4084] hsr_slave_0: left promiscuous mode
[ 3138.710278][ T4084] hsr_slave_1: left promiscuous mode
[ 3139.040911][ T4084] veth1_macvtap: left promiscuous mode
[ 3139.050144][ T4084] veth0_macvtap: left promiscuous mode
[ 3139.086730][ T4084] veth1_vlan: left promiscuous mode
[ 3139.100629][ T4084] veth0_vlan: left promiscuous mode
[ 3155.501275][ T4084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3156.869383][ T4084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3158.754127][ T4084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3159.980499][ T4084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3177.113968][ T4084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3177.549120][ T4084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3177.918455][ T4084] bond0 (unregistering): Released all slaves
[ 3180.181416][ T4084] hsr_slave_0: left promiscuous mode
[ 3180.249784][ T4084] hsr_slave_1: left promiscuous mode
[ 3180.620914][ T4084] veth1_macvtap: left promiscuous mode
[ 3180.645969][ T4084] veth0_macvtap: left promiscuous mode
[ 3180.650301][ T4084] veth1_vlan: left promiscuous mode
[ 3180.679372][ T4084] veth0_vlan: left promiscuous mode
[ 3206.428532][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3207.109029][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3207.237840][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3207.730536][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3228.213975][ T4829] hsr_slave_0: entered promiscuous mode
[ 3228.276480][ T4829] hsr_slave_1: entered promiscuous mode
[ 3230.142749][ T4832] hsr_slave_0: entered promiscuous mode
[ 3230.218048][ T4832] hsr_slave_1: entered promiscuous mode
[ 3230.277215][ T4832] debugfs: 'hsr0' already exists in 'hsr'
[ 3230.280454][ T4832] Cannot create hsr debugfs directory
[ 3247.652831][ T4829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3248.244124][ T4829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3248.733951][ T4829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3249.429689][ T4829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3253.679827][ T4832] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3254.039204][ T4832] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3254.327493][ T4832] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3254.553774][ T4832] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3274.108838][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3279.193757][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3374.779094][ T4829] veth0_vlan: entered promiscuous mode
[ 3375.903222][ T4829] veth1_vlan: entered promiscuous mode
[ 3380.227907][ T4829] veth0_macvtap: entered promiscuous mode
[ 3380.909431][ T4829] veth1_macvtap: entered promiscuous mode
[ 3384.426255][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3384.436648][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3384.437771][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3384.438470][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3404.036752][ T4832] veth0_vlan: entered promiscuous mode
[ 3405.029817][ T4832] veth1_vlan: entered promiscuous mode
[ 3408.587892][ T4832] veth0_macvtap: entered promiscuous mode
[ 3409.116982][ T4832] veth1_macvtap: entered promiscuous mode
[ 3413.426015][ T3424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3413.457559][ T3424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3413.498082][ T3424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3413.646234][ T3424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4482.602747][ T4758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4484.276628][ T4758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4485.556654][ T4758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4487.140848][ T4758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4512.222571][ T4758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4512.670457][ T4758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4512.937953][ T4758] bond0 (unregistering): Released all slaves
[ 4515.926229][ T4758] hsr_slave_0: left promiscuous mode
[ 4516.078158][ T4758] hsr_slave_1: left promiscuous mode
[ 4516.936188][ T4758] veth1_macvtap: left promiscuous mode
[ 4516.953108][ T4758] veth0_macvtap: left promiscuous mode
[ 4516.967698][ T4758] veth1_vlan: left promiscuous mode
[ 4516.969319][ T4758] veth0_vlan: left promiscuous mode
[ 4617.508563][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4617.959337][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4659.290972][ T5651] hsr_slave_0: entered promiscuous mode
[ 4659.399880][ T5651] hsr_slave_1: entered promiscuous mode
[ 4659.529024][ T5651] debugfs: 'hsr0' already exists in 'hsr'
[ 4659.534044][ T5651] Cannot create hsr debugfs directory
[ 4680.878612][ T5651] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 4681.447939][ T5651] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 4682.037750][ T5651] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 4682.638561][ T5651] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 4720.353139][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4884.779489][ T5651] veth0_vlan: entered promiscuous mode
[ 4886.100155][ T5651] veth1_vlan: entered promiscuous mode
[ 4890.460177][ T5651] veth0_macvtap: entered promiscuous mode
[ 4891.183426][ T5651] veth1_macvtap: entered promiscuous mode
[ 4895.466943][ T3424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4895.478570][ T3424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4895.512691][ T3424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4895.531159][ T3424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5790.953508][ T5556] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5792.552895][ T5556] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5793.870824][ T5556] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5795.000921][ T5556] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5812.001275][ T5556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5812.138034][ T5556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5812.266962][ T5556] bond0 (unregistering): Released all slaves
[ 5814.979377][ T5556] hsr_slave_0: left promiscuous mode
[ 5815.188698][ T5556] hsr_slave_1: left promiscuous mode
[ 5815.890337][ T5556] veth1_macvtap: left promiscuous mode
[ 5815.891696][ T5556] veth0_macvtap: left promiscuous mode
[ 5815.916595][ T5556] veth1_vlan: left promiscuous mode
[ 5815.937529][ T5556] veth0_vlan: left promiscuous mode
[ 5847.439656][ T5556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5848.809521][ T5556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5850.313159][ T5556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5851.950373][ T5556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 5872.678100][ T5556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 5872.822053][ T5556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 5872.957926][ T5556] bond0 (unregistering): Released all slaves
[ 5874.938124][ T5556] hsr_slave_0: left promiscuous mode
[ 5875.358598][ T5556] hsr_slave_1: left promiscuous mode
[ 5876.506655][ T5556] veth1_macvtap: left promiscuous mode
[ 5876.507972][ T5556] veth0_macvtap: left promiscuous mode
[ 5876.532545][ T5556] veth1_vlan: left promiscuous mode
[ 5876.588141][ T5556] veth0_vlan: left promiscuous mode
[ 5903.190264][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5903.649067][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5921.527814][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5921.820613][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5929.582087][ T6291] hsr_slave_0: entered promiscuous mode
[ 5929.639941][ T6291] hsr_slave_1: entered promiscuous mode
[ 5947.612115][ T6291] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 5949.055696][ T6291] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 5949.806537][ T6291] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 5951.343030][ T6291] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 5953.567505][ T6299] hsr_slave_0: entered promiscuous mode
[ 5953.680462][ T6299] hsr_slave_1: entered promiscuous mode
[ 5953.786896][ T6299] debugfs: 'hsr0' already exists in 'hsr'
[ 5953.829529][ T6299] Cannot create hsr debugfs directory
[ 5974.072981][ T6299] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 5974.530703][ T6299] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 5974.894087][ T6299] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 5975.243659][ T6299] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 5984.019235][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6006.373891][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6130.678356][ T6291] veth0_vlan: entered promiscuous mode
[ 6132.089420][ T6291] veth1_vlan: entered promiscuous mode
[ 6136.169126][ T6291] veth0_macvtap: entered promiscuous mode
[ 6136.940599][ T6291] veth1_macvtap: entered promiscuous mode
[ 6141.538136][ T5886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6141.546818][ T5886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6141.669551][ T5886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6141.713019][ T4084] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6161.661029][ T6299] veth0_vlan: entered promiscuous mode
[ 6163.377030][ T6299] veth1_vlan: entered promiscuous mode
[ 6167.962514][ T6299] veth0_macvtap: entered promiscuous mode
[ 6169.022574][ T6299] veth1_macvtap: entered promiscuous mode
[ 6173.263793][ T5673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6173.278221][ T6308] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6173.288253][ T5886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6173.289114][ T5886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6566.148447][ T6698] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6568.268047][ T6698] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6571.100665][ T6698] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6575.533900][ T6698] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6611.713482][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6612.211900][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6612.597035][ T6698] bond0 (unregistering): Released all slaves
[ 6615.297445][ T6698] hsr_slave_0: left promiscuous mode
[ 6615.438764][ T6698] hsr_slave_1: left promiscuous mode
[ 6616.166582][ T6698] veth1_macvtap: left promiscuous mode
[ 6616.196504][ T6698] veth0_macvtap: left promiscuous mode
[ 6616.203528][ T6698] veth1_vlan: left promiscuous mode
[ 6616.230695][ T6698] veth0_vlan: left promiscuous mode
[ 6644.822774][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6645.451796][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6649.819378][ T6698] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6651.757531][ T6698] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6653.342161][ T6698] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6655.083264][ T6698] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6664.992960][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6668.198371][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6687.058358][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6687.395905][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6687.621616][ T6698] bond0 (unregistering): Released all slaves
[ 6691.272431][ T6698] hsr_slave_0: left promiscuous mode
[ 6691.516846][ T6698] hsr_slave_1: left promiscuous mode
[ 6692.442719][ T6698] veth1_macvtap: left promiscuous mode
[ 6692.458980][ T6698] veth0_macvtap: left promiscuous mode
[ 6692.467076][ T6698] veth1_vlan: left promiscuous mode
[ 6692.478623][ T6698] veth0_vlan: left promiscuous mode
[ 6728.521109][ T6660] hsr_slave_0: entered promiscuous mode
[ 6728.701058][ T6660] hsr_slave_1: entered promiscuous mode
[ 6747.350827][ T6666] hsr_slave_0: entered promiscuous mode
[ 6747.434000][ T6666] hsr_slave_1: entered promiscuous mode
[ 6747.577647][ T6666] debugfs: 'hsr0' already exists in 'hsr'
[ 6747.586115][ T6666] Cannot create hsr debugfs directory
[ 6755.146054][ T6660] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 6755.717316][ T6660] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 6756.452516][ T6660] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 6757.510446][ T6660] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 6771.243315][ T6666] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 6771.793231][ T6666] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 6772.388246][ T6666] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 6772.898798][ T6666] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 6797.083504][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6812.373528][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6968.122142][ T6660] veth0_vlan: entered promiscuous mode
[ 6969.677805][ T6660] veth1_vlan: entered promiscuous mode
[ 6974.157383][ T6660] veth0_macvtap: entered promiscuous mode
[ 6974.742261][ T6660] veth1_macvtap: entered promiscuous mode
[ 6979.824182][ T5673] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6979.842002][ T5673] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6979.978293][ T5673] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6980.033038][ T6308] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6988.009008][ T6666] veth0_vlan: entered promiscuous mode
[ 6990.509036][ T6666] veth1_vlan: entered promiscuous mode
[ 6995.763138][ T6666] veth0_macvtap: entered promiscuous mode
[ 6996.848988][ T6666] veth1_macvtap: entered promiscuous mode
[ 7002.601781][ T4422] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 7002.617698][ T4422] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 7002.618821][ T4422] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 7002.619624][ T4422] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8331.020589][ T6703] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8333.181615][ T6703] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8336.820366][ T6703] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8338.926624][ T6703] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8369.381777][ T6703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8369.911366][ T6703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8370.740999][ T6703] bond0 (unregistering): Released all slaves
[ 8374.328170][ T6703] hsr_slave_0: left promiscuous mode
[ 8374.552444][ T6703] hsr_slave_1: left promiscuous mode
[ 8375.587018][ T6703] veth1_macvtap: left promiscuous mode
[ 8375.588319][ T6703] veth0_macvtap: left promiscuous mode
[ 8375.612422][ T6703] veth1_vlan: left promiscuous mode
[ 8375.614026][ T6703] veth0_vlan: left promiscuous mode
[ 8420.232589][ T6304] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8422.331370][ T6304] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8424.159337][ T6304] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8425.666682][ T6304] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8460.541208][ T6304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8460.822509][ T6304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8461.098381][ T6304] bond0 (unregistering): Released all slaves
[ 8465.017406][ T6304] hsr_slave_0: left promiscuous mode
[ 8465.149648][ T6304] hsr_slave_1: left promiscuous mode
[ 8466.049809][ T6304] veth1_macvtap: left promiscuous mode
[ 8466.061942][ T6304] veth0_macvtap: left promiscuous mode
[ 8466.101613][ T6304] veth1_vlan: left promiscuous mode
[ 8466.128660][ T6304] veth0_vlan: left promiscuous mode
[ 8546.578283][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8547.142949][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8551.561273][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8551.980187][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8590.343699][ T7425] hsr_slave_0: entered promiscuous mode
[ 8590.461414][ T7425] hsr_slave_1: entered promiscuous mode
[ 8596.552866][ T7428] hsr_slave_0: entered promiscuous mode
[ 8596.640062][ T7428] hsr_slave_1: entered promiscuous mode
[ 8596.779923][ T7428] debugfs: 'hsr0' already exists in 'hsr'
[ 8596.786497][ T7428] Cannot create hsr debugfs directory
[ 8638.019976][ T7425] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 8639.102996][ T7425] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 8640.036261][ T7425] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 8640.802918][ T7425] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 8649.672227][ T7428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 8650.600323][ T7428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 8651.226495][ T7428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 8651.966613][ T7428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 8681.452887][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8690.503549][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8834.218620][ T7425] veth0_vlan: entered promiscuous mode
[ 8835.772526][ T7425] veth1_vlan: entered promiscuous mode
[ 8840.627616][ T7425] veth0_macvtap: entered promiscuous mode
[ 8842.471423][ T7425] veth1_macvtap: entered promiscuous mode
[ 8844.703943][ T7428] veth0_vlan: entered promiscuous mode
[ 8847.442343][ T7428] veth1_vlan: entered promiscuous mode
[ 8850.767960][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8850.799517][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8850.804033][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8850.847199][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8856.440195][ T7428] veth0_macvtap: entered promiscuous mode
[ 8857.940240][ T7428] veth1_macvtap: entered promiscuous mode
[ 8863.750746][ T5653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8863.791741][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8863.837241][ T7394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8863.869160][ T7394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 9100.658166][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9101.327367][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9120.148591][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9120.825609][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9163.760544][ T7677] hsr_slave_0: entered promiscuous mode
[ 9164.019929][ T7677] hsr_slave_1: entered promiscuous mode
[ 9164.196597][ T7677] debugfs: 'hsr0' already exists in 'hsr'
[ 9164.218485][ T7677] Cannot create hsr debugfs directory
[ 9188.602743][ T7683] hsr_slave_0: entered promiscuous mode
[ 9188.791574][ T7683] hsr_slave_1: entered promiscuous mode
[ 9188.956926][ T7683] debugfs: 'hsr0' already exists in 'hsr'
[ 9188.986855][ T7683] Cannot create hsr debugfs directory
[ 9240.371388][ T7677] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 9245.169689][ T7677] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 9248.866728][ T7677] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 9249.959366][ T7677] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 9269.459605][ T7683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 9270.214075][ T7683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 9270.971752][ T7683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 9271.820458][ T7683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 9308.801055][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9325.636970][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9352.307776][   T27] INFO: task syz.1.758:7663 blocked for more than 430 seconds.
[ 9352.330625][   T27]       Not tainted syzkaller #0
[ 9352.376480][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 9352.377256][   T27] task:syz.1.758       state:D stack:0     pid:7663  tgid:7663  ppid:7425   task_flags:0x400040 flags:0x00000019
[ 9352.378788][   T27] Call trace:
[ 9352.379292][   T27]  __switch_to+0x584/0xb20 (T)
[ 9352.381387][   T27]  __schedule+0x1eec/0x33a4
[ 9352.381936][   T27]  schedule+0xac/0x27c
[ 9352.382393][   T27]  schedule_timeout+0x5c/0x1e4
[ 9352.382899][   T27]  do_wait_for_common+0x28c/0x444
[ 9352.383377][   T27]  wait_for_completion+0x44/0x5c
[ 9352.383834][   T27]  __synchronize_srcu+0x2a4/0x320
[ 9352.569302][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 9352.569993][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 9352.570459][   T27]  kvm_put_kvm+0x698/0xbe8
[ 9352.570910][   T27]  kvm_vm_release+0x58/0x78
[ 9352.571385][   T27]  __fput+0x4ac/0x980
[ 9352.571862][   T27]  ____fput+0x20/0x58
[ 9352.572351][   T27]  task_work_run+0x1bc/0x254
[ 9352.572803][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 9352.573254][   T27]  el0_svc+0x170/0x234
[ 9352.573749][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 9352.687340][   T27]  el0t_64_sync+0x198/0x19c
[ 9352.717788][   T27] 
[ 9352.717788][   T27] Showing all locks held in the system:
[ 9352.718391][   T27] 1 lock held by khungtaskd/27:
[ 9352.718817][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 9352.721394][   T27] 2 locks held by getty/3195:
[ 9352.721779][   T27]  #0: 9ef00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
SYZFAIL: failed to recv rpc
[ 9352.723499][   T27]  #1: 55ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 9352.917496][   T27] 1 lock held by sshd-session/3325:
[ 9352.917908][   T27] 3 locks held by kworker/u4:2/5402:
[ 9352.918249][   T27] 3 locks held by kworker/u4:7/6304:
[ 9352.918553][   T27] 3 locks held by kworker/u4:12/6308:
[ 9352.918883][   T27] 3 locks held by kworker/u4:13/6511:
[ 9352.919209][   T27]  #0: 32f0000011a54948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 9352.920884][   T27]  #1: ffff80008f0d7c88 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 9352.922481][   T27]  #2: ffff800087c7a2c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[ 9352.924135][   T27] 3 locks held by kworker/u4:1/6669:
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 9353.126298][   T27] 2 locks held by kworker/u4:14/6703:
[ 9353.126782][   T27] 3 locks held by kworker/u4:4/7285:
[ 9353.127117][   T27] 3 locks held by kworker/u4:5/7394:
[ 9353.127420][   T27] 3 locks held by kworker/u4:15/7431:
[ 9353.127763][   T27] 2 locks held by syz.0.757/7655:
[ 9353.128081][   T27] 1 lock held by syz-executor/7677:
[ 9353.128410][   T27] 1 lock held by syz-executor/7683:
[ 9353.128719][   T27]  #0: ffff800087c7a2c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[ 9353.130469][   T27] 3 locks held by dhcpcd-run-hook/7826:
[ 9353.131030][   T27] 
[ 9353.131295][   T27] =============================================
[ 9353.131295][   T27] 
[ 9373.512064][   T27] INFO: task syz.1.758:7663 blocked for more than 451 seconds.
[ 9373.537939][   T27]       Not tainted syzkaller #0
[ 9373.544169][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 9373.563338][   T27] task:syz.1.758       state:D stack:0     pid:7663  tgid:7663  ppid:7425   task_flags:0x400040 flags:0x00000019
[ 9373.564154][   T27] Call trace:
[ 9373.597175][   T27]  __switch_to+0x584/0xb20 (T)
[ 9373.597816][   T27]  __schedule+0x1eec/0x33a4
[ 9373.598284][   T27]  schedule+0xac/0x27c
[ 9373.598730][   T27]  schedule_timeout+0x5c/0x1e4
[ 9373.599227][   T27]  do_wait_for_common+0x28c/0x444
[ 9373.599670][   T27]  wait_for_completion+0x44/0x5c
[ 9373.600137][   T27]  __synchronize_srcu+0x2a4/0x320
[ 9373.600652][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 9373.601160][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 9373.601592][   T27]  kvm_put_kvm+0x698/0xbe8
[ 9373.602014][   T27]  kvm_vm_release+0x58/0x78
[ 9373.602450][   T27]  __fput+0x4ac/0x980
[ 9373.602925][   T27]  ____fput+0x20/0x58
[ 9373.603375][   T27]  task_work_run+0x1bc/0x254
[ 9373.603819][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 9373.756748][   T27]  el0_svc+0x170/0x234
[ 9373.769882][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 9373.770597][   T27]  el0t_64_sync+0x198/0x19c
[ 9373.771269][   T27] 
[ 9373.771269][   T27] Showing all locks held in the system:
[ 9373.771574][   T27] 1 lock held by khungtaskd/27:
[ 9373.771923][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 9373.773794][   T27] 2 locks held by getty/3195:
[ 9373.774116][   T27]  #0: 9ef00000120328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 9373.900669][   T27]  #1: 55ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 9373.902424][   T27] 2 locks held by kworker/u4:2/5402:
[ 9373.902785][   T27] 3 locks held by kworker/u4:9/5653:
[ 9373.903115][   T27] 3 locks held by kworker/u4:8/5886:
[ 9373.903453][   T27] 3 locks held by kworker/u4:14/6703:
[ 9373.903809][   T27] 3 locks held by kworker/u4:4/7285:
[ 9373.904116][   T27] 3 locks held by kworker/u4:5/7394:
[ 9373.995642][   T27] 3 locks held by kworker/u4:16/7445:
[ 9373.996168][   T27] 2 locks held by syz.0.757/7655:
[ 9373.996531][   T27] 2 locks held by syz-executor/7677:
[ 9373.996871][   T27] 2 locks held by syz-executor/7683:
[ 9373.997285][   T27] 
[ 9373.997517][   T27] =============================================
[ 9373.997517][   T27] 

VM DIAGNOSIS:
07:54:37  Registers:
info registers vcpu 0

CPU#0
 PC=ffff8000853e06a4 X00=0000000000000000 X01=ffff8000871fe612
X02=0000000000000006 X03=00000000ffffffff X04=0000000000000000
X05=0000000000000000 X06=ffff8000853de8b4 X07=ffff800082fa2ba4
X08=0000000000000000 X09=00000000000000a1 X10=ffff800087ef99d8
X11=ffff8000880cfa60 X12=a1f000000dc028b0 X13=0000000000000028
X14=0000000000002000 X15=0000000000000080 X16=ffff80008c5c0000
X17=fff07fffeb590000 X18=00000000000000ff X19=efff800000000000
X20=fff0000072d6a160 X21=0000000000000000 X22=fff0000072d6a1a0
X23=ffff800087831440 X24=ffff8000877da160 X25=fff0000072d6a160
X26=ffff800087805000 X27=00000000000000ff X28=0000000000000000
X29=ffff80008c5c78d0 X30=ffff800080461d68  SP=ffff80008c5c7870
PSTATE=40402009 -Z-- EL2h  SVCR=00000000 --  BTYPE=0     FPCR=00000000 FPSR=00000000
P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000
P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000
FFR=0000
Z00=2525252525252525:2525252525252525 Z01=65642f000a732520:7325207334362e25
Z02=742065726f6d2072:6f662064656b636f Z03=000000ff0000ff00:00ff0000000000ff
Z04=0000000000000000:000f00f00f00000f Z05=64656b636f6c6220:333636373a383537
Z06=203a29315f657661:6c735f646e6f6220 Z07=206e612073612067:6e6976616c736e45
Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000
Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000
Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000
Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000
Z16=0000fffffc400f30:0000fffffc400f30 Z17=ffffff80ffffffd0:0000fffffc400f00
Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000
Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000
Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000
Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000
Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000
Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000
Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000