last executing test programs:

1h8m50.402713358s ago: executing program 1 (id=121):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a000000050000000100000000000000050000004c794c397f00000000000c000000000000004f4abe8d1c433d662e62d2823f4d270d23a31e62b770e207dd887fbe9955d0d32b486ef77a926ceb306a497b50b250bb38ea55a423ebe4f1109a74fd84ca78a4b1399ce42a2eeda179437b55bf4d7912983179ed324591a6ef2ff1e8e70acc881047d52c23b71d1b1ad1e96182be6678fe69839c6176046c2a164208b903b006e0965bb22b02b70a2f4484"]) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25)
r3 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000240)=0x100})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x8001, 0x4}}], 0x28}, 0x0, 0x0) (async)
r9 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x0, &(0x7f0000000000)=0x3}) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x5, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000280)=0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, <r13=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r13, 0x400454d1, 0x3) (async)
r14 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x12)
syz_kvm_setup_cpu$arm64(r15, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(r0)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r16, 0xae03, 0x20b31810)

1h8m39.845806177s ago: executing program 1 (id=123):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r2, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000667000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x80, 0xffff1000, 0x0, r7, 0x2})
openat$kvm(0x0, &(0x7f00000000c0), 0x1ad840, 0x0)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20003d)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r10, 0x2000006, 0x10, r9, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r10, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)

1h8m23.258572484s ago: executing program 1 (id=125):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x309201, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0x40086602, 0x8000000400000004)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0x84000007, [0x60e, 0xfffffffffffffffb, 0x4, 0x8, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x3}}], 0x68}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000000000000080000000000"])
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r3, 0xe, 0x32, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r3, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000e4d000/0x3000)=nil, r3, 0x3000004, 0x810, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r3, 0x100000a, 0x8010, r4, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0x24}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x2})

1h8m16.498450332s ago: executing program 1 (id=128):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r1, 0x5761, 0x2000001c)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000})
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, 0x0)

1h8m9.357805141s ago: executing program 1 (id=130):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x180)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$arm64(r8, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0)=[{0x0, &(0x7f00000003c0)=[@code={0xa, 0x9c, {"0020201e0030000fe08480d200e0b8f2810180d2620180d2230180d2a40080d2020000d4408580d200a0b8f2210180d2020180d2830080d2040180d2020000d4e02295d200a0b0f2c10080d2e20180d2c30180d2240080d2020000d40000629e007008d500fc009b000008d5a0c588d200a0b8f2a10080d2a20180d2230180d2040080d2020000d4"}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x30c}}, @code={0xa, 0x9c, {"40808bd20080b8f2a10180d2a20080d2430180d2640080d2020000d4000028d560a191d200c0b8f2a10180d2620080d2c30180d2040080d2020000d4000000d21f0000f1008008d5007008d50000402c20bf99d20080b0f2e10080d2a20180d2630080d2640080d2020000d460bd90d20000b8f2610180d2220180d2030180d2240080d2020000d4"}}, @smc={0x1e, 0x40, {0x84000012, [0x6, 0x5, 0x3d, 0x733dae1e, 0x10000]}}, @code={0xa, 0xe4, {"a0ba95d20080b8f2810080d2620080d2c30080d2c40080d2020000d4a0728cd20060b0f2e10180d2a20180d2030080d2240080d2020000d4e0af96d20020b0f2210180d2820080d2230080d2040180d2020000d4809586d200e0b8f2810180d2a20180d2e30080d2c40080d2020000d4000028d5007008d5009299d20000b8f2e10080d2420080d2630080d2e40180d2020000d4000028d5e04c96d20060b8f2010080d2a20080d2630080d2040180d2020000d4408692d20040b0f2810080d2220080d2630080d2e40080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x6, 0x0, 0x0, 0x8, 0x401, 0x4, 0x1}}, @mrs={0xbe, 0x18, {0x6030000000138080}}, @code={0xa, 0x6c, {"007008d5007008d5000008d5000008d5007008d520b09fd200c0b8f2010080d2820180d2a30180d2640180d2020000d4007008d5008c200e0000221e20ba92d20020b8f2e10080d2420080d2c30080d2240180d2020000d4"}}, @smc={0x1e, 0x40, {0x30000000, [0xcf, 0x49b, 0x200, 0x9]}}], 0x370}], 0x1, 0x0, &(0x7f00000001c0)=[@featur1={0x1, 0x19}], 0x1)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013df64, 0x8000}}, @msr={0x14, 0x20, {0x603000000013df7f, 0x8000}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0xae)
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x4, 0x9, 0x1}})
ioctl$KVM_RUN(r13, 0xae80, 0x0)

1h7m56.984165312s ago: executing program 1 (id=132):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async, rerun: 64)
r4 = eventfd2(0x0, 0x0) (rerun: 64)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0x8000000, 0x0, r4})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x2000, 0x1}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1h7m13.415911915s ago: executing program 32 (id=131):
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r2 = openat$kvm(0x0, &(0x7f0000000180), 0x1cbf82, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
openat$kvm(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c8})

1h7m10.519173186s ago: executing program 33 (id=132):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async, rerun: 64)
r4 = eventfd2(0x0, 0x0) (rerun: 64)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x1a64afb6, 0x8000000, 0x0, r4})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x2000, 0x1}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

59m45.869390066s ago: executing program 3 (id=160):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x60000, 0x0) (async, rerun: 64)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bde000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r4, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x4, 0x3e0) (async)
r5 = openat$kvm(0x0, &(0x7f0000000000), 0x309400, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x6a6400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x20)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@other={0xfffffffffffffffe, &(0x7f0000000100)=0x5}) (async, rerun: 32)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x13)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x110, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async, rerun: 32)
r12 = eventfd2(0x0, 0x0)
close(r12) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (rerun: 64)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0x40087602, 0xffffffffff7ffffe)

59m37.459974638s ago: executing program 2 (id=161):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) (async)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x13000, 0x1}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f00000003c0)={0x4, 0xa7e9ea20e9018807, 0x1})
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b)
r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x3, 0x80000001, 0xffffffffffffffff}) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013dce1}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) (async)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
r13 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
r15 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r3, r15, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x394}], 0x1, 0x0, &(0x7f0000000580)=[@featur1={0x1, 0x2}], 0x1)

59m33.549724293s ago: executing program 3 (id=162):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000180))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000200)={0x54ea, 0x7, 0x8})
r4 = eventfd2(0x8, 0x80800)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}})
syz_kvm_vgic_v3_setup(r9, 0x2, 0x0)
close(r9)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100048, &(0x7f0000000000)=0x3})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r4, 0x3})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4, 0xd000, 0x8, r4, 0xa})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r4, 0x3})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) (async)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000180)) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) (async)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000200)={0x54ea, 0x7, 0x8}) (async)
eventfd2(0x8, 0x80800) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async)
syz_kvm_vgic_v3_setup(r9, 0x2, 0x0) (async)
close(r9) (async)
syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100048, &(0x7f0000000000)=0x3}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r4, 0x3}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x4, 0xd000, 0x8, r4, 0xa}) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r4, 0x3}) (async)

59m15.778154496s ago: executing program 2 (id=163):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x7, 0xb4})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4f831, 0xffffffffffffffff, 0x0)
eventfd2(0x9, 0x800)
r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

59m10.589319606s ago: executing program 3 (id=164):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x8, [0x1, 0x2, 0x800, 0x7, 0x8, 0x4, 0x7, 0x4]}) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae03, 0xc3) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000340)={0x5}) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)

59m5.626556772s ago: executing program 2 (id=165):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100038, &(0x7f0000000000)=0x80000000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000dfe000/0x2000)=nil, 0x930, 0x6, 0x12, r6, 0x0)

59m1.100269172s ago: executing program 3 (id=166):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100008, &(0x7f0000000240)=0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x7f)

58m51.869612349s ago: executing program 2 (id=167):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0xd000, 0x1000, &(0x7f0000e1c000/0x1000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x4c6183, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x2}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

58m50.338308472s ago: executing program 3 (id=168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000fb0000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
write$eventfd(r9, &(0x7f00000001c0), 0xf001)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
write$eventfd(r10, &(0x7f00000001c0), 0xff3c)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

58m39.536609456s ago: executing program 2 (id=169):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="320000000000000040000000000000005000008400000000070000000000040009000000000000000800000000000000f8ffffffffffffff6afb000000000000800b2255853e4641a9dc160e3ec1bf6b8b570aa78f8304a6fde248604350ea1353e27ca4221404bbfab0d77d9eb9c7407e01a6ad268080c929491466f7cfae4348cf5ea6a3bd72227275f731c7e1e21fc7ecd6d1bab63ae9876bf68759be6b4de2"], 0x40}], 0x1, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0xf0780000002e2172, 0x0})
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x200, 0x52e, &(0x7f0000000240)=0x6})
r8 = ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000001)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r14, 0xae03, 0x46)
r15 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r16 = syz_kvm_vgic_v3_setup(r8, 0xfffffffffbffffff, 0x1a0)
ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x3ff, 0x1, &(0x7f0000000300)=0x10000})
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x5d)

58m33.310711875s ago: executing program 3 (id=170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10201, 0x0, &(0x7f0000fbd000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r10, 0x1, 0x12, r8, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r11, 0x8, 0x13, r8, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r11, 0x1000001, 0x12, r8, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x2d0})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000aa6000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7, <r14=>0xffffffffffffffff})
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r18, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})

58m24.320048747s ago: executing program 2 (id=171):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xf3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001501c0, 0x0})

57m46.209104502s ago: executing program 34 (id=170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10201, 0x0, &(0x7f0000fbd000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r10, 0x1, 0x12, r8, 0x0)
r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r11, 0x8, 0x13, r8, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r11, 0x1000001, 0x12, r8, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x2d0})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000aa6000/0x400000)=nil)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000100)={0x7, <r14=>0xffffffffffffffff})
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r18, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0})

57m35.699054854s ago: executing program 35 (id=171):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xf3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001501c0, 0x0})

41m53.533252025s ago: executing program 4 (id=236):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)=[@its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x2, 0x6, 0x100, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x37a}}, @hvc={0x32, 0x40, {0x89ba415bb0da0af0, [0x8001, 0x200, 0x0, 0xeee8, 0xffff]}}, @eret={0xe6, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x50280000001a2b8b}}, @uexit={0x0, 0x18, 0x2}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x3}}, @svc={0x122, 0x40, {0xc4000005, [0x100000000, 0xfffffffffffffffd, 0x4, 0x1, 0xe]}}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013deec}}, @msr={0x14, 0x20, {0x603000000013df71, 0x8}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x1f7}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x357}}, @code={0xa, 0x54, {"007008d5000020aa0010200e20d38ed20080b8f2a10080d2820080d2c30080d2c40180d2020000d4007008d5000008d50040000c000008d5000040f90030000f"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0xb9}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18, {0x603000000013e130}}, @eret={0xe6, 0x18, 0x78}], 0x29c}, &(0x7f0000000100)=[@featur1={0x1, 0x2}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1ff, 0x8, &(0x7f0000000140)=0xab2})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bfd000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x2d0})
r10 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b10000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000080)=@arm64_fw={0x6030000000140003, &(0x7f00000000c0)=0x5})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil})
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r16, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

41m50.909960415s ago: executing program 5 (id=237):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)={0xcf9d, 0xdddd1000}) (async)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100)={0xcf9d, 0xdddd1000})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x200000000000002, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x5000})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

41m41.815998095s ago: executing program 5 (id=238):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x3550, 0x3}}], 0x58}, 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

41m37.994356232s ago: executing program 4 (id=239):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000008c0)={0x2000, 0x0, 0x4})
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000240)=@arm64_bitmap={0x6030000000160004, &(0x7f00000000c0)})
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x4010, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)

41m23.708658294s ago: executing program 5 (id=240):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
eventfd2(0x0, 0x0)
r1 = eventfd2(0x0, 0x0)
close(r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400840, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x394f869383aa98b6, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x541b, 0x0)
eventfd2(0xba88, 0x80401)
r10 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)

41m23.400560241s ago: executing program 4 (id=241):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140000, &(0x7f0000000040)=0x10000})
r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000001c0)={0x8, <r11=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x8, &(0x7f0000000080)=0x2e09})
r12 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x4, 0x110, r12, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000180)={0x8, <r17=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r17, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x2, 0x0, 0x0})
syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x10000, 0x0, 0x1})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)

41m1.046675946s ago: executing program 4 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
close(0x5)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x3, 0x1, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x20080, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6)
syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x14}) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000f66000/0x3000)=nil, 0x930, 0x3000001, 0x16831, r9, 0x0) (async)
r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

40m57.959946821s ago: executing program 5 (id=243):
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000008000002"])
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x8001})
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = eventfd2(0x4, 0x80000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r4})
close(r3)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3d)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x8})
ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r1, 0x3})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)=ANY=[])
openat$kvm(0x0, 0x0, 0x0, 0x0)
r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f00000001c0)={0x3000, 0x5000, 0x80000001, 0x0, 0xfffffffb})

40m48.500452546s ago: executing program 4 (id=244):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x5100000}}) (async)
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x5, 0xffffffffffffffff}) (async)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x2, 0x40)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
close(0x4) (async)
close(0x5) (async)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xee)

40m46.364583137s ago: executing program 5 (id=245):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x401c5820, 0xffff98600fff)

40m36.458395943s ago: executing program 5 (id=246):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r2, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000640)=@arm64_extra={0x603000000013c513, &(0x7f00000000c0)=0x9})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110e22ffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0x80086601, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000140)={0x10002, 0x4, 0x2, 0x1000, &(0x7f0000fff000/0x1000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)

40m36.220660765s ago: executing program 4 (id=247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r6, 0x3})
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x203, 0x0, 0x2, r6, 0xf})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x8, 0x8, 0x2}}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xd4}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

39m49.438342862s ago: executing program 36 (id=246):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$arm64(r2, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xe0, 0xb4, '\x00', 0x1})
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000640)=@arm64_extra={0x603000000013c513, &(0x7f00000000c0)=0x9})
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110e22ffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r11, 0x80086601, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000140)={0x10002, 0x4, 0x2, 0x1000, &(0x7f0000fff000/0x1000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)

39m45.366621031s ago: executing program 37 (id=247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r6, 0x3})
r7 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r7})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x203, 0x0, 0x2, r6, 0xf})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x29)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x8, 0x8, 0x2}}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xd4}, 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r13, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r13, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

27m24.972080032s ago: executing program 6 (id=277):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000000, [0x40000099a, 0x5cf, 0xaca, 0x6, 0x1]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10001})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r8})
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
r9 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@smc={0x1e, 0x40, {0x84000050, [0x5, 0x6, 0x0, 0x3, 0xbf]}}], 0x40}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

27m6.65611168s ago: executing program 6 (id=279):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) (async)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000}) (async)

26m45.192493s ago: executing program 6 (id=281):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36)
ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x3, &(0x7f0000000080)})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
openat$kvm(0x0, 0x0, 0x80, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x400454d0, 0x2c)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r6, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4f831, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x7, <r9=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0})
ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead)

26m26.146186684s ago: executing program 6 (id=283):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r14, 0x3, 0x11, r13, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r14, 0x1, 0x12, r8, 0x0)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r15, 0x8, 0x13, r8, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r15, 0x1000001, 0x12, r8, 0x0)
r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r16, 0x100000d, 0x11, r13, 0x0)

26m0.288753563s ago: executing program 6 (id=285):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fab000/0x1000)=nil})
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x7, 0xb}}], 0x58}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f00000000c0)=0x5})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fab000/0x1000)=nil}) (async)
syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x7, 0xb}}], 0x58}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f00000000c0)=0x5}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)

25m40.832099931s ago: executing program 6 (id=287):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x10000, 0x2000, 0x3, 0x0, 0x5})
r2 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x1000004, 0x11, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48) (async)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f000000e000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x610}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x40}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0x40086602, 0x110e227ffe) (async)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0x40086602, 0x110e227ffe)
r13 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

24m53.337993763s ago: executing program 38 (id=287):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x10000, 0x2000, 0x3, 0x0, 0x5})
r2 = eventfd2(0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x1000004, 0x11, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48) (async)
syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f000000e000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="22010000000000004000000000000000110800c000000000000000000000040001000000000000000000000001000000ffffffffffffffff0100000000000000e60000000000000018000000000000000000000000000000220100000000000040000000000000005300008400000000030000000000000008000000000000000600000000000000040400000000000004000000000000008200000000000000280000000000000000000000000000000100000000000000130000000000000046000000000000001800000000000000030000003f0100000a00000000000000b400000000000000000040ada0a194d20060b0f2810180d2220180d2230180d2240080d2020000d440508ad20060b0f2610180d2620080d2430180d2e40180d2020000d440ca8ed20020b8f2410180d2220080d2430180d2a40180d2020000d4008008d5209095d20000b0f2210180d2020080d2e30080d2240080d2020000d4c0bb8ed20040b0f2610080d2220080d2030080d2640180d2020000d4000008d5007008d50028c01ac0035fd6aa0000000000000028000000000000000500030000000a00000003000000f9ffffff010000000000820000000000000028000000000000000400000000000000040000000000000047010000000000000a000000000000008400000000000000007008d50084800dc07297d200a0b8f2810180d2c20180d2e30180d2840180d2020000d4203b8ad200a0b0f2410180d2220080d2830180d2440080d2020000d4008008d5000028d5007008d50020000e007008d5e0b48cd20020b8f2c10180d2220080d2c30180d2440180d2020000d4c0035fd61e000000000000004000000000000000040000000000000001000000000000800700000000000000070000000000000007000000000000000e00000000000000e60000000000000018000000000000000100000000000000820000000000000028000000000000000100000000000000010000000000000033010000000000006e0000000000000030000000000000000000080800000000040000000000000006000000000000000000000000000000aa0000000000000028000000000000000901010000000b00000006000000ac2600000300000000001e000000000000004000000000000000060000840000000001000000000000000400000000000000ffffff7f00000000050000000000000000000000000000000a000000000000005400000000000000007008d5007008d5007008d5007008d500bc200ea07d8fd20060b0f2410080d2e20080d2e30080d2c40180d2020000d4000028d50048215e0000001200000094c0035fd68200000000000000280000000000000003000000000000000300000000000000eb03000000000000be000000000000001800000000000000cbe613000000306022010000000000004000000000000000200000c5000000000100000001000000ffffffffffffffff000800000000000010000000000000000700000000000000320000000000000040000000000000000d00008400000000ff0f000000000000b4990000000000000300000000000000010000000000000069000000000000001400000000000000200000000000000028c513000000000000000000000000001400000000000000200000000000000008f2130000003060ffff0000000000003200000000000000400000000000000000000080000000000800000000000000c30e00000000000000000000000000000300000000000000f8ffffffffffffffaa0000000000000028000000000000000a01000000000c00000000040000000400000400000000008200000000000000280000000000000000000000000000000100000000000000bd000000000000000a000000000000008400000000000000007008d520728fd200a0b0f2d37c5a64d79cfc57b882a8010180d2e20180d2a30180d2040080d2020000d4008008d580e89ed20020b8f2210080d2620180d2c30180d2a40080d2020000d4000028d5a0348ed2c4455061410180d2420180d2630180d2c40180d2020000d4007008d500d8a15e000028d5007008d5c0035fd66e000000000000003000000000000000000008080000000080000000000000000600000000"], 0x610}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x40}], 0x1)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r9, 0x0) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0x40086602, 0x110e227ffe) (async)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0x40086602, 0x110e227ffe)
r13 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r14, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

15m43.1691949s ago: executing program 7 (id=320):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r4, 0x54e3, 0x110c230008)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)=0x81})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
r7 = eventfd2(0x0, 0x0)
close(r7)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000002, 0x13, r7, 0x0)
write$eventfd(r7, &(0x7f0000000180)=0x5, 0xfffffde3)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)

15m26.209553964s ago: executing program 8 (id=290):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88c80, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, r5, 0x2000004, 0x2011, r4, 0x0)
r6 = eventfd2(0x0, 0x0)
close(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r6, 0x0)

15m17.154649955s ago: executing program 7 (id=321):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x8, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x48, 0xdddd1000, 0x0, r2, 0x4})
close(r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
close(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil})

15m8.936197181s ago: executing program 8 (id=322):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x3, 0x0, 0xa0c7f64c43351c8c, 0xffffffffffffffff, 0xc})
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
ioctl$KVM_CAP_ARM_USER_IRQ(r3, 0x4068aea3, &(0x7f0000000140))
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x8}) (async)
ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000000c0)={0xe1, 0x0, 0x8})
openat$kvm(0x0, 0x0, 0x0, 0x0)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0x4b47, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) (async)
r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r12, 0x2, 0x12, r11, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000000000000000c20cecfa0a97ab7800", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async)
r14 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

14m58.98129514s ago: executing program 7 (id=323):
r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r2, 0x541b, 0x10000000000000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf61f269743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0x48)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000200)={0x18102, 0x1, 0xf000, 0x2000, &(0x7f0000299000/0x2000)=nil, 0x9})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0)

14m45.947986824s ago: executing program 8 (id=324):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x10000})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @generic={0xeefe8000, 0x32e, 0x2, 0xe}}], 0x30}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
r12 = eventfd2(0x0, 0x0)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
r13 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f94000/0x4000)=nil, 0x4000)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
write$eventfd(r12, &(0x7f0000000180)=0x5, 0xfffffde3)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

14m40.431069842s ago: executing program 7 (id=325):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000280)=0x4f627b94})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0xb, 0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r4 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2c)
r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000300)={0x0, &(0x7f0000000340)=[@irq_setup={0x46, 0x18, {0x0, 0x13c}}, @smc={0x1e, 0x40, {0x1000000, [0x45, 0xb, 0x8, 0x401, 0x40]}}, @msr={0x14, 0x20, {0x603000000013da11, 0x401}}, @irq_setup={0x46, 0x18, {0x1, 0x236}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x3, 0xfffffffe, 0xffff, 0x5, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013df4a}}, @svc={0x122, 0x40, {0x86000001, [0x80000000, 0x7, 0x3, 0x8, 0x9]}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x3f000000, [0x2, 0x1, 0x5f9e, 0x3, 0x5]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x28a}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3da}}, @svc={0x122, 0x40, {0x3000000, [0x8000000000000000, 0xffffffffffffffff, 0x7, 0x5, 0x91]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0xc, 0x4682, 0x80, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x1e}}, @irq_setup={0x46, 0x18, {0x3, 0xdb}}, @svc={0x122, 0x40, {0xc4000007, [0x8001, 0xb1, 0x3, 0x80000002, 0x1b]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xc, 0x9}}, @eret={0xe6, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x2, 0x1e7}}, @hvc={0x32, 0x40, {0x800, [0xa80, 0x8, 0x2027, 0xa, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c664}}, @hvc={0x32, 0x40, {0x84000010, [0xdc, 0x5, 0x5, 0x8]}}, @smc={0x1e, 0x40, {0x84000005, [0x9, 0xc5c, 0x2, 0xffffffffffffff1b, 0x80]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x4, 0x2000000000, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xc00, 0x48, 0x3}}], 0x438}, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0x9, 0x4, 0x4, 0x409, 0x4d]}}], 0x40}, &(0x7f0000000180)=[@featur2={0x1, 0x20}], 0x1)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
close(0x4)
r14 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c021, &(0x7f0000000140)=0x9})

14m14.054821999s ago: executing program 8 (id=326):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r6})
close(r5)
close(r6)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9dd)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14m10.959380962s ago: executing program 7 (id=327):
r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r2, 0x4, 0x3a0)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
r3 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000)
ioctl$KVM_CREATE_VM(r5, 0x541b, 0x10000000000000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000fb0000/0x2000)=nil})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13m51.392774604s ago: executing program 8 (id=328):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000240)=0xffffffff})

13m45.026101509s ago: executing program 7 (id=329):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x8}) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000100)="fb0149dd033be3ac2cc4a29ea6af8031d1dfd900080001000000315f9731c10d097fd66f8f1f44f9ffffffffffffffebb207000000000000000000002a2900", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async, rerun: 64)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

13m38.247669175s ago: executing program 8 (id=330):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xef)
r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000040)={0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0)
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000040)=@arm64_fp={0x60400000001000b2, &(0x7f00000000c0)=0x6})
eventfd2(0x6, 0x800)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r13, 0x1, 0x12, r11, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r14, 0x8, 0x13, r11, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r14, 0x1000001, 0x12, r11, 0x0)

12m58.678834177s ago: executing program 39 (id=329):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x8}) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31)
ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r6, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000100)="fb0149dd033be3ac2cc4a29ea6af8031d1dfd900080001000000315f9731c10d097fd66f8f1f44f9ffffffffffffffebb207000000000000000000002a2900", 0x0, 0x48) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) (async, rerun: 64)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="04198bd844c9e8a7b82d748f0f0244293d28bd9400bfc2ed44db9969759357abeb8d85c8e856a4606c2e979f98d67e4ff39fb6df9547f6a9506c610dc37b175c3ad3c9952305abf0", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0)

12m47.278122642s ago: executing program 40 (id=330):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xef)
r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000040)={0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x3, 0xa0)
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000040)=@arm64_fp={0x60400000001000b2, &(0x7f00000000c0)=0x6})
eventfd2(0x6, 0x800)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0)
r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r13, 0x1, 0x12, r11, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r14, 0x8, 0x13, r11, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r14, 0x1000001, 0x12, r11, 0x0)

3m2.016343601s ago: executing program 9 (id=336):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="a400"])
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @generic={0x10000, 0x1e2, 0x10001, 0xc}}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @eret={0xe6, 0x18, 0xfffffffffffffff9}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0x5, 0x93df, 0x2, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x339}}, @mrs={0xbe, 0x18, {0x603000000013e710}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x4, 0x9, 0xff, 0x71a, 0x3}}, @uexit={0x0, 0x18, 0xc4}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xc00, 0x5}}, @irq_setup={0x46, 0x18, {0x2, 0x1bd}}, @irq_setup={0x46, 0x18, {0x3, 0x26a}}, @code={0xa, 0x84, {"007008d5000000ea0820201e0000691ec0919cd20060b0f2810080d2220180d2830080d2240180d2020000d4c01692d20060b8f2610180d2220180d2030180d2040080d2020000d4000008d560208cd200e0b8f2a10080d2020080d2830080d2240080d2020000d4000028d50000001c"}}, @memwrite={0x6e, 0x30, @generic={0x0, 0x1e8, 0x5, 0x9}}], 0x21c}, &(0x7f0000000140), 0x1)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r5, 0x4208ae9b, &(0x7f0000000500)={0x20000, 0x0, {[0x6, 0x2, 0x2, 0x7, 0x3c, 0x2, 0x6, 0x1, 0x7, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0x6, 0x9cd], [0x2c, 0x4, 0x5, 0x8001, 0x5, 0x2, 0xac42, 0x401, 0x2, 0x6, 0x5, 0x5, 0x8, 0x7, 0x3, 0x9], [0xb, 0x9, 0x17, 0x401, 0xfff, 0xb05, 0x400, 0xec8, 0x8, 0x5, 0x1, 0x4, 0x6b1, 0x25, 0x5, 0x4], [0x4, 0x3, 0x1, 0x9, 0xe90, 0x9, 0x2, 0xfffffffffffffffa, 0x4, 0x4, 0x1800000000, 0x90f, 0x3, 0xc, 0xb9, 0x1ff]}})
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r6, 0x20, &(0x7f0000000080)="a39073fe3e53e3f1a2bd93919dce537743a62022d41fec43", 0x0, 0x18)
syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})

2m48.521521462s ago: executing program 0 (id=337):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc5000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@irq_setup={0x46, 0x18, {0x0, 0x3db}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m31.307715022s ago: executing program 9 (id=338):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8007ffffffffff)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$arm64(r3, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000180)=@arm64_sve={0x608000000015036d, &(0x7f0000000200)=0xfffffffffffffffc})
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, 0x0)

2m29.501574927s ago: executing program 0 (id=339):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0}) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) (rerun: 64)

2m12.5486735s ago: executing program 0 (id=340):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da01000000000000004c24501958da2e2c18b875c2357c6ed600", 0x0, 0x48)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
write$eventfd(r5, &(0x7f00000001c0)=0xffffff7f, 0xff25)
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bde000/0x400000)=nil)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x4000})
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x40)
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, &(0x7f0000000000)=0x4})
ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0xfff, &(0x7f00000000c0)=0xfffffffffffffff7})
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r12, 0x400454d4, 0x110c230008)

2m6.270457262s ago: executing program 9 (id=341):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x3000007, 0x2012, r0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7e)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
close(r9)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x1f4488f5, 0x2, 0x2, r9})
r10 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r10, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x2, 0x4, &(0x7f0000000000)=0xc})

1m46.262187147s ago: executing program 9 (id=342):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x4, 0x2, &(0x7f0000000080)=0xd450})
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x5, 0xfffffffe, 0x0, 0x0, 0x79, 0x3}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x3a0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m42.469701215s ago: executing program 0 (id=343):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_irq={0x0, 0x0, 0x2000000, 0x0})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x14})

1m26.1682828s ago: executing program 9 (id=344):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r2, 0x4068aea3, &(0x7f00000000c0))
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000ee6000/0x1000)=nil})
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x1})
r12 = openat$kvm(0x0, &(0x7f0000000340), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_USER_IRQ(r13, 0x4068aea3, &(0x7f0000000240))
r14 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x8000, [0x1, 0x4de8, 0xef23, 0x4, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x9, 0x7}}, @hvc={0x32, 0x40, {0x84000012, [0x45, 0x20000000000, 0x7, 0xd26d, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x9a, 0x4, 0x9, 0x7, 0x6, 0x2}}], 0xd8}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

1m9.660687727s ago: executing program 0 (id=345):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0201, 0x0) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000140)=0x7})

54.309150015s ago: executing program 9 (id=346):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x8001)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x2083, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000073000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@mrs={0xbe, 0x18, {0x603000000013c081}}], 0x18}, 0x0, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x2, 0x8, 0x7, 0x2}}, @eret={0xe6, 0x18, 0x7}, @code={0xa, 0x84, {"000008d50040200dc0fe8ad20020b8f2e10180d2420180d2430080d2240180d2020000d4609487d200e0b0f2410180d2a20080d2230180d2440180d2020000d4000028d5c0668ed20060b8f2810080d2a20080d2a30180d2440180d2020000d4000008d5000000140040c00c007008d5"}}, @hvc={0x32, 0x40, {0xc5000010, [0x9, 0x8, 0x4, 0x4, 0xb]}}, @eret={0xe6, 0x18, 0x5a}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xa, 0xe9, 0x10001, 0x1}}, @memwrite={0x6e, 0x30, @generic={0x8001003, 0x8eb, 0xfc9}}, @hvc={0x32, 0x40, {0x1c0000037, [0x3, 0xc6, 0x3, 0x200, 0xe71]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x2f2}}, @msr={0x14, 0x20, {0x603000000013c65d, 0x4b}}, @code={0xa, 0x6c, {"e0d489d20060b0f2e10080d2020080d2830180d2e40180d2020000d4a0ba9bd200e0b8f2610180d2c20080d2230080d2440080d2020000d40000009000f8a02e000028d5007008d5000028d5000028d5000c000e000008d5"}}, @smc={0x1e, 0x40, {0x84000002, [0x3ff, 0x1, 0x10000, 0x3, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x25, 0x82, 0x6, 0x4}}], 0x2d0}, &(0x7f00000000c0)=[@featur2={0x1, 0xd0}], 0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2a)
ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0xf4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501040, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r14 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x23)
ioctl$KVM_GET_STATS_FD_vm(r14, 0xaece)
syz_kvm_assert_reg(r13, 0x603000000013c4f1, 0x8000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60)

52.458548084s ago: executing program 0 (id=347):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x8)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000280)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000240)=0x9f})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000a, 0x53033, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}, &(0x7f0000000000)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x1, 0xf, &(0x7f00000000c0)=0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xe6)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

8.300317913s ago: executing program 41 (id=346):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a5a000/0x400000)=nil)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x8001)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0x0, &(0x7f00000001c0), 0x2083, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000073000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@mrs={0xbe, 0x18, {0x603000000013c081}}], 0x18}, 0x0, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x2, 0x2, 0x8, 0x7, 0x2}}, @eret={0xe6, 0x18, 0x7}, @code={0xa, 0x84, {"000008d50040200dc0fe8ad20020b8f2e10180d2420180d2430080d2240180d2020000d4609487d200e0b0f2410180d2a20080d2230180d2440180d2020000d4000028d5c0668ed20060b8f2810080d2a20080d2a30180d2440180d2020000d4000008d5000000140040c00c007008d5"}}, @hvc={0x32, 0x40, {0xc5000010, [0x9, 0x8, 0x4, 0x4, 0xb]}}, @eret={0xe6, 0x18, 0x5a}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xa, 0xe9, 0x10001, 0x1}}, @memwrite={0x6e, 0x30, @generic={0x8001003, 0x8eb, 0xfc9}}, @hvc={0x32, 0x40, {0x1c0000037, [0x3, 0xc6, 0x3, 0x200, 0xe71]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x2f2}}, @msr={0x14, 0x20, {0x603000000013c65d, 0x4b}}, @code={0xa, 0x6c, {"e0d489d20060b0f2e10080d2020080d2830180d2e40180d2020000d4a0ba9bd200e0b8f2610180d2c20080d2230080d2440080d2020000d40000009000f8a02e000028d5007008d5000028d5000028d5000c000e000008d5"}}, @smc={0x1e, 0x40, {0x84000002, [0x3ff, 0x1, 0x10000, 0x3, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x25, 0x82, 0x6, 0x4}}], 0x2d0}, &(0x7f00000000c0)=[@featur2={0x1, 0xd0}], 0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2a)
ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0xf4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501040, 0x0)
r13 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r14 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x23)
ioctl$KVM_GET_STATS_FD_vm(r14, 0xaece)
syz_kvm_assert_reg(r13, 0x603000000013c4f1, 0x8000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_IRQCHIP(r15, 0xae60)

0s ago: executing program 42 (id=347):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x8)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000280)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000240)=0x9f})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1})
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000a, 0x53033, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
r11 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}, &(0x7f0000000000)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x1, 0xf, &(0x7f00000000c0)=0x1})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xe6)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[  377.525052][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.188874][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices
Warning: Permanently added '[localhost]:20640' (ED25519) to the list of known hosts.
[  586.736581][   T25] audit: type=1400 audit(585.950:61): avc:  denied  { name_bind } for  pid=3323 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  588.276076][   T25] audit: type=1400 audit(587.500:62): avc:  denied  { execute } for  pid=3324 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  588.309400][   T25] audit: type=1400 audit(587.530:63): avc:  denied  { execute_no_trans } for  pid=3324 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  610.076648][   T25] audit: type=1400 audit(609.300:64): avc:  denied  { mounton } for  pid=3324 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  610.112924][   T25] audit: type=1400 audit(609.330:65): avc:  denied  { mount } for  pid=3324 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  610.196474][ T3324] cgroup: Unknown subsys name 'net'
[  610.257371][   T25] audit: type=1400 audit(609.480:66): avc:  denied  { unmount } for  pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  610.747501][ T3324] cgroup: Unknown subsys name 'cpuset'
[  610.910591][ T3324] cgroup: Unknown subsys name 'rlimit'
[  611.863409][   T25] audit: type=1400 audit(611.080:67): avc:  denied  { setattr } for  pid=3324 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  611.880598][   T25] audit: type=1400 audit(611.100:68): avc:  denied  { mounton } for  pid=3324 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  611.905910][   T25] audit: type=1400 audit(611.120:69): avc:  denied  { mount } for  pid=3324 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  612.946718][ T3328] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  612.968458][   T25] audit: type=1400 audit(612.190:70): avc:  denied  { relabelto } for  pid=3328 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  612.998050][   T25] audit: type=1400 audit(612.220:71): avc:  denied  { write } for  pid=3328 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  613.195588][   T25] audit: type=1400 audit(612.410:72): avc:  denied  { read } for  pid=3324 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  613.223330][   T25] audit: type=1400 audit(612.430:73): avc:  denied  { open } for  pid=3324 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  613.264863][ T3324] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  668.302896][   T25] audit: type=1400 audit(667.510:74): avc:  denied  { execmem } for  pid=3334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  672.564859][   T25] audit: type=1400 audit(671.770:75): avc:  denied  { read } for  pid=3336 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  672.579363][   T25] audit: type=1400 audit(671.800:76): avc:  denied  { open } for  pid=3336 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  672.653501][   T25] audit: type=1400 audit(671.870:77): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  672.916943][   T25] audit: type=1400 audit(672.140:78): avc:  denied  { module_request } for  pid=3336 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  672.943280][   T25] audit: type=1400 audit(672.160:79): avc:  denied  { module_request } for  pid=3337 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  673.908871][   T25] audit: type=1400 audit(673.120:80): avc:  denied  { sys_module } for  pid=3337 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  695.420439][ T3336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.610457][ T3336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.295975][ T3337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  697.533260][ T3337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.644687][ T3336] hsr_slave_0: entered promiscuous mode
[  711.694805][ T3336] hsr_slave_1: entered promiscuous mode
[  713.013971][ T3337] hsr_slave_0: entered promiscuous mode
[  713.039350][ T3337] hsr_slave_1: entered promiscuous mode
[  713.073194][ T3337] debugfs: 'hsr0' already exists in 'hsr'
[  713.085240][ T3337] Cannot create hsr debugfs directory
[  718.163349][   T25] audit: type=1400 audit(717.380:81): avc:  denied  { create } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  718.195370][   T25] audit: type=1400 audit(717.410:82): avc:  denied  { write } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  718.266964][   T25] audit: type=1400 audit(717.490:83): avc:  denied  { read } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  718.415485][ T3336] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  718.833779][ T3336] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  719.155618][ T3336] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  719.417498][ T3336] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  720.910604][ T3337] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  721.085341][ T3337] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  721.226848][ T3337] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  721.418754][ T3337] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  732.695149][ T3336] 8021q: adding VLAN 0 to HW filter on device bond0
[  734.885489][ T3337] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.105749][ T3336] veth0_vlan: entered promiscuous mode
[  785.684161][ T3336] veth1_vlan: entered promiscuous mode
[  787.605099][ T3337] veth0_vlan: entered promiscuous mode
[  787.878596][ T3336] veth0_macvtap: entered promiscuous mode
[  788.226133][ T3337] veth1_vlan: entered promiscuous mode
[  788.298819][ T3336] veth1_macvtap: entered promiscuous mode
[  790.693706][ T2133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.706364][ T2133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.735384][ T2133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.796476][ T2133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.095781][ T3337] veth0_macvtap: entered promiscuous mode
[  791.438809][ T3337] veth1_macvtap: entered promiscuous mode
[  793.137988][   T25] audit: type=1400 audit(792.360:84): avc:  denied  { mount } for  pid=3336 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  793.319891][   T25] audit: type=1400 audit(792.510:85): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/syzkaller.UoszQj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  793.560898][   T25] audit: type=1400 audit(792.770:86): avc:  denied  { mount } for  pid=3336 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  794.028286][   T25] audit: type=1400 audit(793.250:87): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/syzkaller.UoszQj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  794.206054][   T25] audit: type=1400 audit(793.380:88): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/syzkaller.UoszQj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  794.236052][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.258602][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.277038][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.299540][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.734718][   T25] audit: type=1400 audit(793.940:89): avc:  denied  { unmount } for  pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  794.949321][   T25] audit: type=1400 audit(794.170:90): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  795.073232][   T25] audit: type=1400 audit(794.260:91): avc:  denied  { mount } for  pid=3336 comm="syz-executor" name="/" dev="gadgetfs" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  795.457570][   T25] audit: type=1400 audit(794.680:92): avc:  denied  { mount } for  pid=3336 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  795.577959][   T25] audit: type=1400 audit(794.780:93): avc:  denied  { mounton } for  pid=3336 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  796.776378][ T3336] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  806.328874][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  806.342270][   T25] audit: type=1400 audit(805.550:98): avc:  denied  { read } for  pid=3487 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.439901][   T25] audit: type=1400 audit(805.660:99): avc:  denied  { open } for  pid=3487 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  806.617988][   T25] audit: type=1400 audit(805.840:100): avc:  denied  { ioctl } for  pid=3487 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  814.379329][   T25] audit: type=1400 audit(813.600:101): avc:  denied  { write } for  pid=3489 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  866.730713][   T25] audit: type=1400 audit(865.950:102): avc:  denied  { append } for  pid=3517 comm="syz.0.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  931.158999][   T25] audit: type=1400 audit(930.340:103): avc:  denied  { execute } for  pid=3553 comm="syz.1.22" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  946.049996][   T25] audit: type=1400 audit(945.220:104): avc:  denied  { create } for  pid=3560 comm="syz.0.25" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  972.725454][   T25] audit: type=1400 audit(971.930:105): avc:  denied  { ioctl } for  pid=3573 comm="syz.0.29" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  983.098878][   T25] audit: type=1400 audit(982.320:106): avc:  denied  { setattr } for  pid=3580 comm="syz.1.32" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1172.230210][ T3686] kvm [3686]: Failed to find VMA for hva 0x20e51000
[ 1233.097556][ T3724] kvm [3724]: Failed to find VMA for hva 0x21016000
[ 1507.679429][   T25] audit: type=1400 audit(1506.900:107): avc:  denied  { map } for  pid=3883 comm="syz.1.125" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1638.939052][ T3910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1639.643385][ T3910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1640.160870][ T3914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1640.980797][ T3914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1662.064512][ T3910] hsr_slave_0: entered promiscuous mode
[ 1662.147634][ T3910] hsr_slave_1: entered promiscuous mode
[ 1662.252985][ T3910] debugfs: 'hsr0' already exists in 'hsr'
[ 1662.253979][ T3910] Cannot create hsr debugfs directory
[ 1666.057446][ T3914] hsr_slave_0: entered promiscuous mode
[ 1666.195776][ T3914] hsr_slave_1: entered promiscuous mode
[ 1666.283620][ T3914] debugfs: 'hsr0' already exists in 'hsr'
[ 1666.287397][ T3914] Cannot create hsr debugfs directory
[ 1675.880071][ T3932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.055842][ T3932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1678.777467][ T3932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1679.978512][ T3932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1690.817905][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1690.927106][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1691.025527][ T3932] bond0 (unregistering): Released all slaves
[ 1692.848338][ T3932] hsr_slave_0: left promiscuous mode
[ 1692.940112][ T3932] hsr_slave_1: left promiscuous mode
[ 1693.537314][ T3932] veth1_macvtap: left promiscuous mode
[ 1693.543468][ T3932] veth0_macvtap: left promiscuous mode
[ 1693.563908][ T3932] veth1_vlan: left promiscuous mode
[ 1693.577963][ T3932] veth0_vlan: left promiscuous mode
[ 1705.810399][ T3910] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1706.059583][ T3910] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1706.680227][ T3910] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1707.147325][ T3910] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1712.244859][ T3932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1712.960330][ T3914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1713.820713][ T3932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.278842][ T3914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1715.215574][ T3932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.529722][ T3914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1716.245491][ T3932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1716.558714][ T3914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1734.490015][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1734.645066][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1734.794018][ T3932] bond0 (unregistering): Released all slaves
[ 1736.644991][ T3932] hsr_slave_0: left promiscuous mode
[ 1736.766675][ T3932] hsr_slave_1: left promiscuous mode
[ 1737.919539][ T3932] veth1_macvtap: left promiscuous mode
[ 1737.953950][ T3932] veth0_macvtap: left promiscuous mode
[ 1737.998854][ T3932] veth1_vlan: left promiscuous mode
[ 1738.025487][ T3932] veth0_vlan: left promiscuous mode
[ 1759.805970][ T3910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1765.098362][ T3914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1839.203672][ T3910] veth0_vlan: entered promiscuous mode
[ 1839.917769][ T3910] veth1_vlan: entered promiscuous mode
[ 1842.495660][ T3910] veth0_macvtap: entered promiscuous mode
[ 1842.953598][ T3910] veth1_macvtap: entered promiscuous mode
[ 1847.080742][ T4004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.088652][ T4004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.103721][ T4004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.116283][ T4004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.304397][ T3914] veth0_vlan: entered promiscuous mode
[ 1849.270009][ T3914] veth1_vlan: entered promiscuous mode
[ 1853.824945][ T3914] veth0_macvtap: entered promiscuous mode
[ 1854.734053][ T3914] veth1_macvtap: entered promiscuous mode
[ 1857.982291][ T4004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.994226][ T4004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1858.040574][ T4004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1858.063921][ T4004] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2243.408912][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2243.738905][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2254.525731][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2254.925742][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2281.625059][ T4315] hsr_slave_0: entered promiscuous mode
[ 2281.756691][ T4315] hsr_slave_1: entered promiscuous mode
[ 2294.196097][ T3932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2295.520213][ T3932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.523153][ T3932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2297.448722][ T3932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2298.188047][ T4322] hsr_slave_0: entered promiscuous mode
[ 2298.227921][ T4322] hsr_slave_1: entered promiscuous mode
[ 2298.287780][ T4322] debugfs: 'hsr0' already exists in 'hsr'
[ 2298.290607][ T4322] Cannot create hsr debugfs directory
[ 2311.159253][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2311.540237][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2311.874250][ T3932] bond0 (unregistering): Released all slaves
[ 2314.038472][ T3932] hsr_slave_0: left promiscuous mode
[ 2314.107122][ T3932] hsr_slave_1: left promiscuous mode
[ 2314.285767][ T3932] veth1_macvtap: left promiscuous mode
[ 2314.289189][ T3932] veth0_macvtap: left promiscuous mode
[ 2314.302588][ T3932] veth1_vlan: left promiscuous mode
[ 2314.306372][ T3932] veth0_vlan: left promiscuous mode
[ 2333.059667][ T4315] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2334.663734][ T4315] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2335.849643][ T4315] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2337.003427][ T4315] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2339.853215][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2341.117125][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2343.227004][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2345.005279][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2348.880644][ T4322] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2349.752559][ T4322] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2350.120811][ T4322] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2351.368634][ T4322] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2365.209113][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2365.337610][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2365.387649][ T3932] bond0 (unregistering): Released all slaves
[ 2368.637211][ T3932] hsr_slave_0: left promiscuous mode
[ 2368.711931][ T3932] hsr_slave_1: left promiscuous mode
[ 2369.510614][ T3932] veth1_macvtap: left promiscuous mode
[ 2369.557054][ T3932] veth0_macvtap: left promiscuous mode
[ 2369.569444][ T3932] veth1_vlan: left promiscuous mode
[ 2369.588487][ T3932] veth0_vlan: left promiscuous mode
[ 2395.074569][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2409.059790][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2507.968939][ T4315] veth0_vlan: entered promiscuous mode
[ 2508.954973][ T4315] veth1_vlan: entered promiscuous mode
[ 2512.237966][ T4315] veth0_macvtap: entered promiscuous mode
[ 2512.808826][ T4315] veth1_macvtap: entered promiscuous mode
[ 2516.303442][ T2133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2516.316357][ T2133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2516.333008][ T2133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2516.530511][ T2133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2525.285826][ T4322] veth0_vlan: entered promiscuous mode
[ 2526.606903][ T4322] veth1_vlan: entered promiscuous mode
[ 2530.427457][ T4322] veth0_macvtap: entered promiscuous mode
[ 2531.278917][ T4322] veth1_macvtap: entered promiscuous mode
[ 2535.422525][ T4338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2535.490532][ T3735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2535.535465][ T3388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2535.580468][ T3388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3152.577300][   T25] audit: type=1400 audit(3151.780:108): avc:  denied  { map } for  pid=4920 comm="syz.4.242" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=20179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3152.653319][   T25] audit: type=1400 audit(3151.850:109): avc:  denied  { read } for  pid=4920 comm="syz.4.242" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=20179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 3247.599087][ T3932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3249.207908][ T3932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3250.925506][ T3932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3252.508075][ T3932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3270.385990][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3270.573897][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3270.663222][ T3932] bond0 (unregistering): Released all slaves
[ 3272.446307][ T3932] hsr_slave_0: left promiscuous mode
[ 3273.012649][ T3932] hsr_slave_1: left promiscuous mode
[ 3273.943729][ T3932] veth1_macvtap: left promiscuous mode
[ 3273.965705][ T3932] veth0_macvtap: left promiscuous mode
[ 3273.985566][ T3932] veth1_vlan: left promiscuous mode
[ 3274.020473][ T3932] veth0_vlan: left promiscuous mode
[ 3302.230101][ T3932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3304.040378][ T3932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3305.595289][ T3932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3306.767445][ T3932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3326.985795][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3327.058692][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3327.167333][ T3932] bond0 (unregistering): Released all slaves
[ 3328.838604][ T3932] hsr_slave_0: left promiscuous mode
[ 3328.920370][ T3932] hsr_slave_1: left promiscuous mode
[ 3329.300182][ T3932] veth1_macvtap: left promiscuous mode
[ 3329.353061][ T3932] veth0_macvtap: left promiscuous mode
[ 3329.364074][ T3932] veth1_vlan: left promiscuous mode
[ 3329.375297][ T3932] veth0_vlan: left promiscuous mode
[ 3381.450375][ T4950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3382.217604][ T4950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3382.427165][ T4952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3383.356569][ T4952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3409.686388][ T4950] hsr_slave_0: entered promiscuous mode
[ 3409.748071][ T4950] hsr_slave_1: entered promiscuous mode
[ 3413.139975][ T4952] hsr_slave_0: entered promiscuous mode
[ 3413.276137][ T4952] hsr_slave_1: entered promiscuous mode
[ 3413.366342][ T4952] debugfs: 'hsr0' already exists in 'hsr'
[ 3413.393209][ T4952] Cannot create hsr debugfs directory
[ 3433.785332][ T4950] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3434.625632][ T4950] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3435.225659][ T4950] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3436.537846][ T4950] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3441.106661][ T4952] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 3441.599261][ T4952] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 3442.083818][ T4952] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 3442.460741][ T4952] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 3466.390484][ T4950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3473.549363][ T4952] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3616.430774][ T4950] veth0_vlan: entered promiscuous mode
[ 3617.696169][ T4950] veth1_vlan: entered promiscuous mode
[ 3622.125029][ T4950] veth0_macvtap: entered promiscuous mode
[ 3624.069097][ T4950] veth1_macvtap: entered promiscuous mode
[ 3625.494636][ T4952] veth0_vlan: entered promiscuous mode
[ 3627.815308][ T4952] veth1_vlan: entered promiscuous mode
[ 3630.814536][ T3388] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3630.822788][ T3388] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3630.849926][ T3388] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3630.865805][ T3388] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3635.065430][ T4952] veth0_macvtap: entered promiscuous mode
[ 3636.396561][ T4952] veth1_macvtap: entered promiscuous mode
[ 3641.354727][ T4368] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3641.363367][ T4368] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3641.396503][ T3388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3641.561955][ T3472] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4146.664832][ T2133] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4149.645849][ T2133] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4152.685360][ T2133] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4155.040637][ T2133] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4187.805551][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4188.265097][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4188.564620][ T2133] bond0 (unregistering): Released all slaves
[ 4191.955210][ T2133] hsr_slave_0: left promiscuous mode
[ 4192.164901][ T2133] hsr_slave_1: left promiscuous mode
[ 4193.075279][ T2133] veth1_macvtap: left promiscuous mode
[ 4193.078587][ T2133] veth0_macvtap: left promiscuous mode
[ 4193.093911][ T2133] veth1_vlan: left promiscuous mode
[ 4193.114964][ T2133] veth0_vlan: left promiscuous mode
[ 4317.278249][ T5431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 4317.783029][ T5431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 4369.306960][ T5431] hsr_slave_0: entered promiscuous mode
[ 4369.516257][ T5431] hsr_slave_1: entered promiscuous mode
[ 4400.039500][ T5431] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 4400.680848][ T5431] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 4401.260834][ T5431] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 4401.976328][ T5431] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 4448.808349][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0
[ 4654.433813][ T5431] veth0_vlan: entered promiscuous mode
[ 4656.188907][ T5431] veth1_vlan: entered promiscuous mode
[ 4661.518303][ T5431] veth0_macvtap: entered promiscuous mode
[ 4662.568532][ T5431] veth1_macvtap: entered promiscuous mode
[ 4668.016242][ T4956] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 4668.058076][ T4338] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 4668.083344][ T4338] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 4668.158726][ T3388] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 4691.719643][   T25] audit: type=1400 audit(4690.900:110): avc:  denied  { execute } for  pid=5702 comm="syz.8.290" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 4858.020919][ T4848] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4860.789218][ T4848] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4864.784621][ T4848] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4866.977833][ T4848] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4894.635411][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4894.865043][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4895.034435][ T4848] bond0 (unregistering): Released all slaves
[ 4899.568005][ T4848] hsr_slave_0: left promiscuous mode
[ 4899.683461][ T4848] hsr_slave_1: left promiscuous mode
[ 4900.930796][ T4848] veth1_macvtap: left promiscuous mode
[ 4900.964167][ T4848] veth0_macvtap: left promiscuous mode
[ 4901.015649][ T4848] veth1_vlan: left promiscuous mode
[ 4901.083634][ T4848] veth0_vlan: left promiscuous mode
[ 4944.660016][ T4848] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4946.230568][ T4848] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4948.000789][ T4848] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4949.928285][ T4848] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 4977.898313][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 4978.264251][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 4978.455009][ T4848] bond0 (unregistering): Released all slaves
[ 4980.530606][ T4848] hsr_slave_0: left promiscuous mode
[ 4980.583250][ T4848] hsr_slave_1: left promiscuous mode
[ 4980.995348][ T4848] veth1_macvtap: left promiscuous mode
[ 4980.998704][ T4848] veth0_macvtap: left promiscuous mode
[ 4981.038993][ T4848] veth1_vlan: left promiscuous mode
[ 4981.093829][ T4848] veth0_vlan: left promiscuous mode
[ 5035.964900][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5036.415787][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5052.344678][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5052.738572][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5077.005447][ T5761] hsr_slave_0: entered promiscuous mode
[ 5077.079794][ T5761] hsr_slave_1: entered promiscuous mode
[ 5092.553190][ T5767] hsr_slave_0: entered promiscuous mode
[ 5092.748433][ T5767] hsr_slave_1: entered promiscuous mode
[ 5092.945262][ T5767] debugfs: 'hsr0' already exists in 'hsr'
[ 5092.982895][ T5767] Cannot create hsr debugfs directory
[ 5103.964194][ T5761] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 5105.313695][ T5761] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 5106.518422][ T5761] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 5109.645497][ T5761] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 5136.529447][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 5137.125785][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 5137.677455][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 5138.214050][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 5154.439034][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5176.337168][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5326.364466][ T5767] veth0_vlan: entered promiscuous mode
[ 5327.687993][ T5767] veth1_vlan: entered promiscuous mode
[ 5332.928106][ T5767] veth0_macvtap: entered promiscuous mode
[ 5334.244690][ T5761] veth0_vlan: entered promiscuous mode
[ 5334.736054][ T5767] veth1_macvtap: entered promiscuous mode
[ 5337.167347][ T5761] veth1_vlan: entered promiscuous mode
[ 5342.043393][ T4956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5342.047225][ T4956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5342.262838][ T3472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5342.515801][ T3472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5347.104886][ T5761] veth0_macvtap: entered promiscuous mode
[ 5348.685891][ T5761] veth1_macvtap: entered promiscuous mode
[ 5355.605883][ T4338] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 5355.608748][ T4338] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 5355.969805][ T4338] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 5356.019469][ T4338] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 5781.269644][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5781.860348][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5789.649195][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 5790.349955][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 5843.596048][ T6096] hsr_slave_0: entered promiscuous mode
[ 5843.796357][ T6096] hsr_slave_1: entered promiscuous mode
[ 5844.036713][ T6096] debugfs: 'hsr0' already exists in 'hsr'
[ 5844.038075][ T6096] Cannot create hsr debugfs directory
[ 5852.578076][ T6099] hsr_slave_0: entered promiscuous mode
[ 5852.823632][ T6099] hsr_slave_1: entered promiscuous mode
[ 5852.929698][ T6099] debugfs: 'hsr0' already exists in 'hsr'
[ 5852.945691][ T6099] Cannot create hsr debugfs directory
[ 5922.428462][ T6099] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 5923.845385][ T6099] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 5924.792881][ T6099] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 5926.983251][ T6099] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 5936.396748][ T6096] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 5937.300544][ T6096] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 5938.283945][ T6096] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 5939.260808][ T6096] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 5980.770721][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0
[ 5992.546077][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6016.644292][   T27] INFO: task syz.0.347:6077 blocked for more than 430 seconds.
[ 6016.648116][   T27]       Not tainted syzkaller #0
[ 6016.688850][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6016.722324][   T27] task:syz.0.347       state:D stack:0     pid:6077  tgid:6077  ppid:5767   task_flags:0x400040 flags:0x00000019
[ 6016.724232][   T27] Call trace:
[ 6016.724754][   T27]  __switch_to+0x584/0xb20 (T)
[ 6016.726850][   T27]  __schedule+0x1eec/0x33a4
[ 6016.727435][   T27]  schedule+0xac/0x27c
[ 6016.727900][   T27]  schedule_timeout+0x5c/0x1e4
[ 6016.728420][   T27]  do_wait_for_common+0x28c/0x444
[ 6016.728878][   T27]  wait_for_completion+0x44/0x5c
[ 6016.729344][   T27]  __synchronize_srcu+0x2a4/0x320
[ 6016.729820][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 6016.730288][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 6016.730731][   T27]  kvm_put_kvm+0x698/0xbe8
[ 6016.955469][   T27]  kvm_vm_release+0x58/0x78
[ 6016.956166][   T27]  __fput+0x4ac/0x980
[ 6016.956702][   T27]  ____fput+0x20/0x58
[ 6016.957167][   T27]  task_work_run+0x1bc/0x254
[ 6016.957625][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 6016.958051][   T27]  el0_svc+0x170/0x234
[ 6016.958558][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 6016.959072][   T27]  el0t_64_sync+0x198/0x19c
[ 6016.960671][   T27] 
[ 6016.960671][   T27] Showing all locks held in the system:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 6017.083053][   T27] 1 lock held by khungtaskd/27:
[ 6017.083807][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 6017.086381][   T27] 3 locks held by kworker/u4:6/2133:
[ 6017.086795][   T27] 2 locks held by getty/3195:
[ 6017.087141][   T27]  #0: 78f00000120368a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6017.088878][   T27]  #1: 09ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 6017.090583][   T27] 4 locks held by sshd-session/3323:
[ 6017.242535][   T27]  #0: fff0000072d6bd58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2f0/0x33a4
[ 6017.244682][   T27]  #1: fff0000072d57588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
[ 6017.246318][   T27]  #2: ffff80008c40a4e8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x7c/0x51c
[ 6017.247943][   T27]  #3: fff0000072d57588 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0x124/0x2d8
[ 6017.249511][   T27] 2 locks held by syz-executor/3324:
[ 6017.249831][   T27] 2 locks held by kworker/u4:3/3388:
[ 6017.250111][   T27]  #0: 37f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6017.383982][   T27]  #1: ffff80008ffa7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6017.385616][   T27] 2 locks held by kworker/u4:8/3472:
[ 6017.385938][   T27]  #0: 37f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6017.387531][   T27]  #1: ffff8000a3ce7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6017.389036][   T27] 3 locks held by kworker/u4:5/4004:
[ 6017.389386][   T27] 3 locks held by kworker/u4:0/4338:
[ 6017.389736][   T27] 2 locks held by kworker/u4:2/4848:
[ 6017.390030][   T27]  #0: 37f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6017.554335][   T27]  #1: ffff80008f3d7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6017.556068][   T27] 3 locks held by kworker/u4:1/5417:
[ 6017.556432][   T27] 3 locks held by kworker/u4:14/5562:
[ 6017.556758][   T27] 3 locks held by kworker/u4:7/5765:
[ 6017.557093][   T27] 2 locks held by syz.9.346/6076:
[ 6017.557458][   T27] 4 locks held by modprobe/6248:
[ 6017.557767][   T27] 2 locks held by modprobe/6249:
[ 6017.558055][   T27] 1 lock held by modprobe/6250:
[ 6017.558513][   T27] 
[ 6017.558797][   T27] =============================================
[ 6017.558797][   T27] 
[ 6037.765897][   T27] INFO: task syz.0.347:6077 blocked for more than 451 seconds.
[ 6037.836663][   T27]       Not tainted syzkaller #0
[ 6037.854269][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6037.854696][   T27] task:syz.0.347       state:D stack:0     pid:6077  tgid:6077  ppid:5767   task_flags:0x400040 flags:0x00000019
[ 6037.855504][   T27] Call trace:
[ 6037.855775][   T27]  __switch_to+0x584/0xb20 (T)
[ 6037.856291][   T27]  __schedule+0x1eec/0x33a4
[ 6037.856746][   T27]  schedule+0xac/0x27c
[ 6037.857173][   T27]  schedule_timeout+0x5c/0x1e4
[ 6037.857684][   T27]  do_wait_for_common+0x28c/0x444
[ 6037.858131][   T27]  wait_for_completion+0x44/0x5c
[ 6037.858588][   T27]  __synchronize_srcu+0x2a4/0x320
[ 6037.859109][   T27]  synchronize_srcu+0x3cc/0x4f0
[ 6037.859606][   T27]  mmu_notifier_unregister+0x320/0x42c
[ 6037.860038][   T27]  kvm_put_kvm+0x698/0xbe8
[ 6037.860462][   T27]  kvm_vm_release+0x58/0x78
[ 6038.023328][   T27]  __fput+0x4ac/0x980
[ 6038.031952][   T27]  ____fput+0x20/0x58
[ 6038.032673][   T27]  task_work_run+0x1bc/0x254
[ 6038.033129][   T27]  exit_to_user_mode_loop+0xfc/0x178
[ 6038.033589][   T27]  el0_svc+0x170/0x234
[ 6038.034092][   T27]  el0t_64_sync_handler+0x84/0x12c
[ 6038.034600][   T27]  el0t_64_sync+0x198/0x19c
[ 6038.102924][   T27] 
[ 6038.102924][   T27] Showing all locks held in the system:
[ 6038.142640][   T27] 1 lock held by khungtaskd/27:
[ 6038.143149][   T27]  #0: ffff800087957208 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48
[ 6038.145069][   T27] 2 locks held by getty/3195:
[ 6038.145440][   T27]  #0: 78f00000120368a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[ 6038.147158][   T27]  #1: 09ff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8
[ 6038.148867][   T27] 3 locks held by kworker/u4:3/3388:
[ 6038.149195][   T27] 3 locks held by kworker/u4:4/3932:
[ 6038.149518][   T27] 2 locks held by kworker/u4:5/4004:
[ 6038.149856][   T27] 2 locks held by kworker/u4:2/4848:
[ 6038.150142][   T27]  #0: 37f000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6038.308005][   T27]  #1: ffff80008f3d7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6038.309675][   T27] 3 locks held by kworker/u4:13/4971:
[ 6038.310009][   T27] 3 locks held by kworker/u4:11/5167:
[ 6038.310355][   T27] 3 locks held by kworker/u4:14/5562:
[ 6038.310694][   T27] 3 locks held by kworker/u4:7/5765:
[ 6038.345505][   T27]  #0: fff0000072d6bd58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2f0/0x33a4
[ 6038.347330][   T27]  #1: fff0000072d57588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8
[ 6038.348968][   T27]  #2: fff0000072d58e98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5c8/0xe7c
[ 6038.350628][   T27] 3 locks held by kworker/u4:15/5772:
[ 6038.454117][   T27] 3 locks held by kworker/u4:9/5931:
[ 6038.457864][   T27] 2 locks held by kworker/0:5/5992:
[ 6038.458302][   T27]  #0: 46f000000cc1bb48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18
[ 6038.460052][   T27]  #1: ffff80008f177c88 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18
[ 6038.533566][   T27] 2 locks held by syz.9.346/6076:
[ 6038.533980][   T27] 1 lock held by modprobe/6255:
[ 6038.534451][   T27] 
[ 6038.534695][   T27] =============================================
[ 6038.534695][   T27]