last executing test programs:

1h53m26.207566361s ago: executing program 1 (id=494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = eventfd2(0xc67, 0x0)
write$eventfd(r1, &(0x7f0000000000), 0x8)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0xa000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000480)={0x2, 0x18000, 0x1})
close(r2)

1h53m25.170446939s ago: executing program 0 (id=495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2d)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x80000, 0x11000, 0x3, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil)
r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0x10, 0x0, 0x20000080, 0x4}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r9, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bc2000/0x400000)=nil)
r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r15, 0x4208ae9b, &(0x7f00000001c0)={0x3, 0x0, {[0x2, 0xd6, 0x504, 0xf2f, 0x2, 0x8, 0x100000001, 0xa4, 0xfb, 0x4b3, 0xc, 0x8, 0x0, 0x8000, 0xc], [0x6, 0x3, 0xea, 0x3ff, 0x4, 0x3, 0x4, 0x4, 0x5b, 0xb, 0x5, 0x6f2, 0x3, 0x8, 0xa38], [0x0, 0x1, 0x100, 0xc2ef, 0x1, 0x5, 0x9, 0x7fff, 0x7, 0x80000000, 0x6, 0xfffffffffffffffb, 0x6, 0x4, 0x4, 0x1], [0x2, 0x89c8, 0xed, 0x0, 0x7, 0x7, 0x7, 0x7, 0x3, 0x2, 0x1, 0x400, 0x5ac, 0x49e4, 0x0, 0x9]}})
syz_kvm_vgic_v3_setup(r13, 0x1, 0x80)
ioctl$KVM_RUN(r15, 0xae80, 0x0)

1h53m17.569810689s ago: executing program 1 (id=496):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x2, 0x41000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

1h53m8.580473037s ago: executing program 1 (id=497):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x0, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x40000000000001, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0x10007, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)

1h53m1.583154753s ago: executing program 0 (id=498):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd2(0x808, 0x80000)
r5 = eventfd2(0x8, 0x80000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x25000, 0x0, r5, 0x2})
r6 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29)
syz_kvm_vgic_v3_setup(r7, 0x2, 0x40)
ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000000)={0x9, 0x5})
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000040)={0x7000, 0x200000, 0x7f, 0x0, 0xe})
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x1, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x400000000002})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x1, 0x0, @msi={0x5, 0x4f}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff, 0x3}}, {0x0, 0x0, 0x1, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @adapter={0x3, 0xfffffffffffffffa, 0x10000, 0x0, 0x9}}]})
write$eventfd(r11, &(0x7f00000001c0)=0x3, 0x50)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x8000000000000002, 0x0, 0x2, r4, 0x2})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x2})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r4, 0x3})
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000780)={0x0, 0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x3, r12})
mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)

1h52m56.487839121s ago: executing program 1 (id=499):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000000)=@arm64_ccsidr={0x6020000000100004, 0x0})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f000000f000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r6, 0x100000a, 0x12, r5, 0x0)
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000000)=@arm64_ccsidr={0x6020000000100004, 0x0}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r6, 0x2, 0x12, r5, 0x0) (async)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f000000f000/0x400000)=nil) (async)
mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r6, 0x100000a, 0x12, r5, 0x0) (async)

1h52m50.851339121s ago: executing program 0 (id=500):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x2000008, 0x28031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000000f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000c80)={0x0, &(0x7f0000001180)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xb0, 0x6, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013e289}}, @eret={0xe6, 0x18, 0x4}, @code={0xa, 0x54, {"007008d50054c01a008008d50090807f008008d5409c95d20020b0f2810080d2820080d2030080d2040080d2020000d41f2003d500d8212e000008d5007008d5"}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7f}}, @mrs={0xbe, 0x18, {0x603000000013801c}}, @smc={0x1e, 0x40, {0x86000000, [0x4, 0x7, 0x100000000, 0x8, 0x8]}}, @irq_setup={0x46, 0x18, {0x4, 0x20c}}, @svc={0x122, 0x40, {0xc4000053, [0x2, 0x2, 0x5, 0xba, 0x6]}}, @uexit={0x0, 0x18, 0x1000}, @irq_setup={0x46, 0x18, {0x2, 0x55}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x4ffa4, 0x80, 0x2}}, @hvc={0x32, 0x40, {0x84000006, [0x9, 0x101, 0x401, 0x8, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x6, 0xf53, 0x1}}, @irq_setup={0x46, 0x18, {0x1, 0x6c}}, @code={0xa, 0x54, {"007008d5007008d5a0f980d200a0b8f2c10080d2e20080d2830080d2240180d2020000d4007008d5007008d5000028d5000028d5007008d50098207e008008d5"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x246}}, @irq_setup={0x46, 0x18, {0x2, 0x52}}, @smc={0x1e, 0x40, {0x10, [0x3, 0x3, 0x3, 0x8, 0x18a]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x1f6}}, @mrs={0xbe, 0x18, {0x603000000013e6c0}}, @mrs={0xbe, 0x18, {0x603000000013c649}}, @irq_setup={0x46, 0x18, {0x2, 0x128}}, @msr={0x14, 0x20, {0x6030000000138026, 0x5}}, @smc={0x1e, 0x40, {0xc4000012, [0xb78, 0xfffffffffffffff1, 0x5, 0x7, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x9658, 0xe, 0xc}}, @irq_setup={0x46, 0x18, {0x3, 0x255}}, @msr={0x14, 0x20, {0x603000000013c642, 0x8}}, @smc={0x1e, 0x40, {0x84000008, [0x82c, 0x5f2, 0xa, 0x2, 0xfffffffffffffffe]}}, @eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000153, [0x7, 0x6, 0x8000000000000000, 0x9, 0x9]}}], 0x508}, &(0x7f0000000cc0)=[@featur2={0x1, 0x10}], 0x1)
syz_kvm_setup_cpu$arm64(r2, r4, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000001140)=[{0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x440}], 0x1, 0x0, &(0x7f0000000180)=[@featur2={0x1, 0xaa}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0)

1h52m42.510338354s ago: executing program 1 (id=501):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x4a080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x40)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x5, 0xffffffffffffffff})
r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x6030000000138032}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1h52m39.909240062s ago: executing program 0 (id=502):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100004, &(0x7f0000000000)=0x8000})
munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)

1h52m30.691650626s ago: executing program 0 (id=503):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x400454e2, 0x1000110c23001c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da63ff2f677e80ab404d37b2e3f137a13bc2b875c2357c6e1100000000000000000000000000000000000000000000000000ff00", 0x0, 0x48)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x102000, 0x20081})
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
write$eventfd(r5, &(0x7f00000001c0)=0x8100000001, 0x51a8)

1h52m30.198945934s ago: executing program 1 (id=504):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x1})
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000001c0)=0xff}) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
write$eventfd(r8, &(0x7f00000001c0), 0xe80)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_extra={0x603000000013c036})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x40000000000001, 0x4000000000000004, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x0, 0x0, 0x8bf, 0x2}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x80) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8}) (async, rerun: 32)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)

1h52m22.809659794s ago: executing program 0 (id=505):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x40)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xae)
ioctl$KVM_CREATE_VM(r4, 0x400454cc, 0x110c230020)

1h51m43.292219889s ago: executing program 32 (id=504):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x1})
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000001c0)=0xff}) (async, rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
write$eventfd(r8, &(0x7f00000001c0), 0xe80)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = eventfd2(0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000) (async)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_extra={0x603000000013c036})
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x34)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x40000000000001, 0x4000000000000004, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x80000, 0x0, 0x0, 0x8bf, 0x2}}], 0x50}, 0x0, 0x0) (async)
syz_kvm_vgic_v3_setup(r10, 0x1, 0x80) (async)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8}) (async, rerun: 32)
r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil)

1h51m35.561004812s ago: executing program 33 (id=505):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23)
ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x40)
r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xae)
ioctl$KVM_CREATE_VM(r4, 0x400454cc, 0x110c230020)

1h4m34.869201056s ago: executing program 3 (id=886):
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100050, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
munmap$KVM_VCPU(r4, 0xffffffff)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x1, 0xb, 0x0, 0xb5c, 0x6, 0x6, 0x9, 0x8, 0x89, 0x2f, 0x2, 0x0, 0x6, 0x6, 0x9, 0x3, 0x27, 0x0, '\x00', 0x12, 0x6})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff, 0x1})
write$eventfd(r7, &(0x7f00000001c0)=0x7ffffff, 0xe80)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x24841, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
r8 = eventfd2(0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x3)
close(r8)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x3000)=nil, r9, 0x9, 0x4000010, r3, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r8, &(0x7f0000000180)=0x5, 0xfffffde3)

1h4m34.527340716s ago: executing program 2 (id=887):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x91dc35117537aeb, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xeeee0000, 0x1000, &(0x7f0000fd1000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000ec2000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000008000/0x1000)=nil, 0x930, 0x1000001, 0x13, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})

1h4m26.391304959s ago: executing program 2 (id=888):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc5000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0)
r4 = syz_kvm_vgic_v3_setup(r2, 0x2, 0x120)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x5, 0x1, 0x0})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_riscv64=@attr_aplic={0x0, 0x1, @valid=0x1ddc, &(0x7f0000000240)=0x7})

1h4m24.234894247s ago: executing program 3 (id=889):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200000000000000f000", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
r4 = eventfd2(0x70, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r5 = eventfd2(0x0, 0x0)
close(r5)
r6 = eventfd2(0x0, 0x0)
close(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

1h4m12.480314186s ago: executing program 2 (id=890):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00003af000/0x400000)=nil)
eventfd2(0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x10002, 0xfffffff9, 0x0, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x5, 0x3, 0x1}}], 0x28}, 0x0, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, 0x0)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
syz_kvm_vgic_v3_setup(r11, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, <r12=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000280)={0xcc, "7000f89aba3cca66b300a6937ebf28c1605a16ffc5ac5115cae625a6af2a5eb78172e466a53672f5e56ee49faf18714ec337f1092b0db055d26a71bba8496288a68a68bba2636c4311049d09a9befe12fd13ecd965b8b0025c5e727628b647824cf4d900d0ee8b54a0d40c9b171c1d28e885ef09782e300b40814c7455365fc3efb199b6311a3d292605af523ed9ee1890074184f7a1fa9dddca4f3312c8afd0edb58bb9db9be80ece3761c324419282612f41c2943565bd8d7662529253a1a1dbb90f623c278356912df23a"})
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0})

1h4m11.662399954s ago: executing program 3 (id=891):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x0, 0xe, 0x10, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000100), 0x88aa83, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000240)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000140)=0x1})
r4 = eventfd2(0x983, 0x800)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r8, 0x2000003, 0x2013, r7, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r9, 0x3000003, 0x2011, r7, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x40010, 0xffffffffffffffff, 0x0)

1h4m1.993349809s ago: executing program 3 (id=892):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc9})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r4=>0xffffffffffffffff, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r5, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000280)="d6011813013c360000000000f4ff8000802346cbd98762c7795582ba3948ecff090001000000000000000000040000000100", 0x0, 0x48)
ioctl$KVM_GET_SREGS(r5, 0x8000ae83, &(0x7f0000000300))
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4030582b, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0xfffffffffffffff7, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xc020660b, 0xe1)

1h3m57.181401975s ago: executing program 2 (id=893):
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000d8f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000c58000/0x4000)=nil, 0x930, 0x200000a, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000000, 0x4d832, 0xffffffffffffffff, 0x8cff)

1h3m49.499463351s ago: executing program 3 (id=894):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x700, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x800000000000013)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) (rerun: 32)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async, rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (rerun: 64)
syz_kvm_vgic_v3_setup(r3, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, <r9=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0)

1h3m48.50133877s ago: executing program 2 (id=895):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200000000000000000100", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
r4 = eventfd2(0x70, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r5 = eventfd2(0x0, 0x0)
close(r5)
r6 = eventfd2(0x0, 0x0)
close(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r6, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

1h3m38.027635753s ago: executing program 3 (id=896):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f0000000100))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0x3, 0x7}})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000080)=0x10001})
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x10, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000b46000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000bc7000/0x4000)=nil, 0x4000)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2b)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000aec000/0x400000)=nil)

1h3m37.288800277s ago: executing program 2 (id=897):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454dc, 0x23)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000200)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f00000000c0)=0x9})
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r5 = eventfd2(0x4, 0x80801)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5, 0x6, 0x2, r4})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000000)={0x5})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000080)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000040)=0x11})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r6, 0x4004aec2, &(0x7f0000000100)=0x4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

1h2m50.769868801s ago: executing program 34 (id=896):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f0000000100))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0x3, 0x7}})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000080)=0x10001})
ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18})
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x10, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000b46000/0x1000)=nil, 0x1000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000bc7000/0x4000)=nil, 0x4000)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2b)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000aec000/0x400000)=nil)

1h2m47.010427665s ago: executing program 35 (id=897):
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454dc, 0x23)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000200)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f00000000c0)=0x9})
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_vgic_v3_setup(r3, 0x1, 0x100)
r5 = eventfd2(0x4, 0x80801)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5, 0x6, 0x2, r4})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0}}, @msr={0x14, 0x20, {0x603000000013df61, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000000)={0x5})
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000080)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000040)=0x11})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_ARM_VCPU_FINALIZE(r6, 0x4004aec2, &(0x7f0000000100)=0x4)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

41m24.972995582s ago: executing program 4 (id=999):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013d000}}], 0x18}, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async)
r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x1, 0x6000, 0x9fff, 0xffffffffffffffff, 0x8})
r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000100)=@arm64={0x4e, 0x2, 0x0, '\x00', 0x4}) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xf) (async)
r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000640)={0x0, &(0x7f00000006c0)=[@mrs={0xbe, 0x18, {0x603000000013dee4}}, @memwrite={0x6e, 0x30, @generic={0x3000, 0x234, 0x7, 0xe}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x0, 0x0, 0x3ff, 0xfff, 0x3}}, @hvc={0x32, 0x40, {0x8, [0xe4, 0xfff, 0x10001, 0x4f7, 0x81]}}, @uexit={0x0, 0x18, 0x1}, @hvc={0x32, 0x40, {0x2, [0x48, 0xb, 0x2660f287, 0x1, 0x2]}}, @code={0xa, 0xb4, {"20788bd20020b0f2410080d2a20180d2a30080d2840180d2020000d4e08994d200c0b0f2e10080d2a20080d2e30080d2c40080d2020000d400fc205e00000094a0718fd20080b0f2810180d2820180d2830180d2840080d2020000d4008008d5000008d5000028d5c0eb9cd20040b0f2810180d2620080d2030080d2040180d2020000d4e0708cd20060b0f2810080d2a20180d2630080d2840080d2020000d4"}}, @code={0xa, 0x6c, {"007008d5000020d400e4002f00ce82d20080b0f2210080d2020180d2430080d2a40180d2020000d40080a255007008d5007008d5c04d9ad200e0b8f2e10080d2420180d2e30080d2840180d2020000d4000008d50000bf0d"}}, @mrs={0xbe, 0x18, {0x603000000013c109}}, @code={0xa, 0x6c, {"007008d50000629e000820bc000008d5003e9bd20020b8f2c10180d2c20180d2230080d2a40080d2020000d4007008d5007c0053e0b497d200c0b0f2a10180d2a20080d2430180d2640180d2020000d4007008d500a4600d"}}, @hvc={0x32, 0x40, {0x10, [0xf256, 0xf12f, 0x1ff, 0xfff]}}], 0x2ec}, &(0x7f0000000680)=[@featur1={0x1, 0x84}], 0x1) (async)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) (async)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, <r16=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0xc1, 0xf, 0x0, 0x5, 0x6, 0x86, 0xfe, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x10000005, 0x93a, 0x20, 0x3, 0x4, 0x8, '\x00', 0x3, 0x8093}) (async)
write$eventfd(r16, &(0x7f00000001c0)=0x3, 0xfdef) (async)
r17 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r17, 0x4010aeab, &(0x7f00000002c0)=@arm64_core={0x6030000000100014, &(0x7f0000000300)=0x55b8}) (async)
r18 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r18, 0x0)

41m16.729354451s ago: executing program 5 (id=1000):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28081, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000769000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x84000002, [0x3, 0x3, 0x2, 0x3f8b, 0x3448]}}], 0x40}, &(0x7f00000000c0)=[@featur2={0x1, 0x4}], 0x1)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x3000})
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x2000})
r4 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0x100000001, 0x8000000040000000, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x200180, 0x0)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x80)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, <r11=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r11, 0x400454cc, 0x110c230020)
r12 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)

41m8.31776853s ago: executing program 4 (id=1001):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = syz_kvm_vgic_v3_setup(r2, 0x3, 0x240)
ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x84, &(0x7f0000000140)=0x200a88})
openat$kvm(0x0, 0xfffffffffffffffe, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2f)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a21000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x210}}], 0x18}, 0x0, 0x0)
r10 = eventfd2(0x8, 0x80801)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x3a0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000140)={0x8000000})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x6, 0x8000000, 0x0, r10})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r13, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000200)=[@featur1={0x1, 0xb0}], 0x1)
r14 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[@uexit={0x0, 0x0, 0x100}, @hvc={0x32, 0x0, {0xc400000d, [0x53, 0x3, 0x8000000000000001, 0xe, 0x1]}}, @code={0xa, 0x0, {"000040a880d38ad20060b0f2610080d2c20180d2a30180d2840180d2020000d480b193d200e0b0f2e10080d2e20180d2e30080d2440080d2020000d40000204a007008d5c0249ed20080b0f2c10180d2820080d2a30080d2c40180d2020000d40000301e006498d20040b8f2010080d2c20180d2230080d2040180d2020000d400c0ff0d40d79bd20060b8f2010080d2e20080d2030180d2040180d2020000d4"}}, @mrs={0xbe, 0x0, {0x20dd}}, @uexit={0x0, 0x0, 0xe7c}, @msr={0x14, 0x0, {0x603000000013da20}}, @its_setup={0x82, 0x0, {0x1, 0x4, 0x39c}}], 0xfeca}, 0x0, 0x0)
syz_kvm_add_vcpu$arm64(r12, 0x0, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x3, 0xa0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000)
write$eventfd(r15, 0x0, 0x0)
syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil)

40m54.590209737s ago: executing program 5 (id=1002):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = eventfd2(0xffff10c0, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf0b, 0x8080000, 0x8, r3})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x40000000, 0x10000, 0x0, 0x105, 0x2}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r5, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r9 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, &(0x7f0000000180)=@attr_other={0x0, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)=0xfe})
r14 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0xfffffffffffffffe)
r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})

40m29.220976061s ago: executing program 4 (id=1003):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2f)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a86000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
r4 = eventfd2(0x5, 0x800)
write$eventfd(r4, &(0x7f0000000080)=0x2002, 0x8)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4360ae82, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

40m28.121695409s ago: executing program 5 (id=1004):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0x0, 0x40010, 0xffffffffffffffff, 0x2000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x400000c8, 0x1})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x85, 0x1, 0x7, '\x00', 0x6})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @adapter={0x8000000000000001, 0x8, 0x2, 0xb, 0xe}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x7fff, 0xffffffbfffffffff}}, {0x0, 0x4, 0x1, 0x0, @sint={0x7fffffff, 0x6}}, {0x0, 0x6, 0x0, 0x0, @msi={0x100, 0x4, 0x4, 0x5}}]})
write$eventfd(r9, &(0x7f00000001c0)=0x3, 0x50)
r10 = eventfd2(0x8, 0x80800)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x5ae940, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x8, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6})
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, <r13=>0xffffffffffffffff, 0x1})
write$eventfd(r13, &(0x7f00000001c0), 0xf001)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r10, 0x3})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x7, 0x80a0000, 0x8, r10, 0xa})
r14 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000080)="fb01db06033ce3c60100a29ea6ab8031d1dfd92f0000dc0320002c005a9610fbff67521c966f8f1f4408357070c2c7aadad0b207000000000400", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000498000/0x1000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x40c000, 0x408)

40m13.320672081s ago: executing program 5 (id=1005):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r2, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
r6 = ioctl$KVM_CREATE_VM(r5, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xb701, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, <r9=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0xb702, 0x0)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r11 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r10, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04)
syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000702000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, r13, 0x3000002, 0x8a031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

39m57.721280842s ago: executing program 4 (id=1006):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
r4 = eventfd2(0x70, 0x0)
close(r4)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r4, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r5 = eventfd2(0x0, 0x0)
close(r5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c82, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x200000e, 0x2011, r5, 0x0)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, 0xffffffffffffffff)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r10, 0x2, 0x100)
ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000180)={0x1010024, 0x1})
eventfd2(0x1, 0x801)
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x27)
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0)
eventfd2(0xfffffffa, 0x80001)

39m57.717853682s ago: executing program 5 (id=1007):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x5421, &(0x7f0000000100)={0x0, 0x11}) (async)
r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async)
r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r7, 0x0) (async)
mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0)

39m46.700360881s ago: executing program 5 (id=1008):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf4)
munmap(&(0x7f0000f06000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000eab000/0x2000)=nil, 0x2000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000000015)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
r3 = syz_kvm_vgic_v3_setup(r1, 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f00000000c0)=0xfff})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x1}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x19}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x7})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4})
r9 = eventfd2(0x6b2, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x2, r9})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})

39m42.65068865s ago: executing program 4 (id=1009):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x200000d, 0x9032, 0xffffffffffffffff, 0x0)

39m31.77038824s ago: executing program 4 (id=1010):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1308], 0x51c}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
r11 = ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xb701, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6})
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0xb702, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x405)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)=@arm64_fp={0x6040000000100095, &(0x7f00000002c0)=0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

38m58.871117464s ago: executing program 36 (id=1008):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf4)
munmap(&(0x7f0000f06000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000eab000/0x2000)=nil, 0x2000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000000000015)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
r3 = syz_kvm_vgic_v3_setup(r1, 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f00000000c0)=0xfff})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x1}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x19}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x33)
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x7})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4})
r9 = eventfd2(0x6b2, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x2, r9})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa80, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8})

38m44.2967838s ago: executing program 37 (id=1010):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1308], 0x51c}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r4, 0x2, 0x40)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, <r10=>0xffffffffffffffff, 0x1})
r11 = ioctl$KVM_CREATE_VM(r10, 0x894c, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xb701, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x6})
ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, <r14=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r14, 0xb702, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x405)
r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)=@arm64_fp={0x6040000000100095, &(0x7f00000002c0)=0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21m41.439591219s ago: executing program 6 (id=1064):
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffc000/0x4000)=nil})
r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000040)="14f21ab7b5e5fcfd5179ad0ba80b6fc8169cbf54da71ce469d2cc11d9f59a4812a1fc116bc980df45dc331f94a98ce6abe7e73eb5da63f56e45f0afa1f1e930eb9a41991ac0158b9", 0x0, 0x48)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0xdf}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x384}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x15a}}, @smc={0x1e, 0x40, {0x84000004, [0x2, 0x7, 0x3, 0x5, 0x200]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x80, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x4, 0xf, 0x1, 0x0, 0x2}}, @memwrite={0x6e, 0x30, @generic={0xe000, 0xbb7, 0x2, 0x7}}, @mrs={0xbe, 0x18, {0x603000000013805c}}, @code={0xa, 0x84, {"a0559ad200a0b0f2010080d2e20180d2030080d2040080d2020000d480028fd20000b8f2e10180d2220080d2630180d2840080d2020000d4008008d5003c207e007008d50000408880739ad20000b0f2810080d2c20080d2a30180d2040080d2020000d4007008d5009c004f0000000e"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xffe8, 0x94c}}, @uexit={0x0, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x3, 0xb0}}, @smc={0x1e, 0x40, {0x0, [0xfff, 0x5, 0xffff, 0x3, 0x1]}}, @code={0xa, 0x84, {"00009f0d40548dd200c0b0f2210180d2820080d2c30180d2240080d2020000d4007008d5009f90d20000b8f2c10080d2c20080d2c30180d2840180d2020000d4007c00130064007fc06a9ed20080b0f2410080d2c20180d2c30080d2840180d2020000d4000080ac0000791e007008d5"}}, @code={0xa, 0x84, {"0084e00d0040206ea0df8bd200a0b8f2410080d2820080d2030080d2840080d2020000d4007008d5407693d20060b8f2810080d2a20180d2430180d2840180d2020000d40054202e0000421e006b8cd20020b8f2e10180d2e20080d2830180d2c40080d2020000d4007008d50000004b"}}, @svc={0x122, 0x40, {0x200, [0x9, 0xfffffffffffffff2, 0x8000000000000001, 0xb, 0x800]}}, @irq_setup={0x46, 0x18, {0x4, 0x39}}, @smc={0x1e, 0x40, {0x84000001, [0x4, 0x1, 0x6, 0x1000]}}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013df6a, 0x5}}, @uexit={0x0, 0x18, 0xcc}, @svc={0x122, 0x40, {0x84000050, [0xb6b, 0x8000000000000001, 0x4, 0x4c, 0xe]}}, @uexit={0x0, 0x18, 0xfa30}, @hvc={0x32, 0x40, {0x80000000, [0x4, 0x3, 0x0, 0x3, 0xd22a]}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x195}}, @hvc={0x32, 0x40, {0x31000000, [0x4, 0x1, 0x4, 0x5, 0x7fff]}}, @mrs={0xbe, 0x18, {0x301800000009dcea}}, @uexit={0x0, 0x18, 0x5}, @svc={0x122, 0x40, {0x84000005, [0xf3, 0x5b4, 0x0, 0x2, 0x2ac]}}], 0x5dc}, &(0x7f0000000700)=[@featur2={0x1, 0x7}], 0x1)
r3 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r1, 0x4, 0x10, r2, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000740)=@arm64)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x1000)=nil, r1, 0xc, 0x10, r2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f0000000780)={0x1, 0x5})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x8400, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000800)={0x1, 0x4, 0x4, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000840)="744e54b9afb3cc42b3f56908854bc012d5ab895d2895483f680b31b8925ab79a6a3ee4c69099390111b5cb38597e4b22d848cc81768111ccf83be6fc4e2fb16f55f971b748305586", 0x0, 0x48)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x40)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f00000008c0)={0xa8, 0x0, 0x2})
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000980)=@riscv64_core={0x803000000020001b, &(0x7f0000000940)=0x7})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x44200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x10001)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000a00)="c5ed856cfd2bd51d1b75340459d37260eb5511230cbccdba", 0x0, 0x18)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r1, 0xf, 0x20010, r5, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000a40)={0x6, 0x2})
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000ac0)=@arm64_sys={0x603000000013803f, &(0x7f0000000a80)=0x9})
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000b00)="eb82e128807021891531d6590ca1f135b7fc7fc8cbf29404", 0x0, 0x18)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000b40)=0x4)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000b80)=0x2)
syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000f40)={0x0, &(0x7f0000000bc0)=[@irq_setup={0x46, 0x18, {0x4, 0x353}}, @eret={0xe6, 0x18}, @irq_setup={0x46, 0x18, {0x4, 0xa0}}, @eret={0xe6, 0x18, 0xc}, @uexit={0x0, 0x18, 0x3}, @svc={0x122, 0x40, {0x0, [0x40, 0x101, 0x101, 0x8000000000000001, 0x10]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1e7}}, @mrs={0xbe, 0x18, {0x6030000000138035}}, @smc={0x1e, 0x40, {0x800, [0x80000000, 0x7f, 0x6, 0x3, 0x2]}}, @svc={0x122, 0x40, {0xc4000005, [0xfffffffffffffffe, 0x6, 0x81, 0x9, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffd0, 0xb55, 0xc}}, @hvc={0x32, 0x40, {0x1, [0x2, 0x3, 0x100000000, 0xffffffffffffffff, 0xc8a]}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013def0, 0x34}}, @smc={0x1e, 0x40, {0xc4000010, [0x5, 0x3, 0xf, 0xf086, 0x54]}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0x3fe, 0x3, 0xc}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x0, 0x6}}, @uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0xc24e}, @smc={0x1e, 0x40, {0x800, [0x5d575fac, 0x4, 0x7, 0x3, 0xe]}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x4, 0x0, 0x2, 0x2a, 0x2}}], 0x358}, &(0x7f0000000f80)=[@featur1={0x1, 0x1}], 0x1)
syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000fc0)="7dd4ed1f9c1f3fcd2be57fd79ee6c55a1f29e5657cea39a8", 0x0, 0x18)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000001000)={r6, 0x6, 0x2, r6})

21m35.120300343s ago: executing program 7 (id=1065):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80403, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000c00)=[{0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x208}], 0x1, 0x0, &(0x7f0000000c40)=[@featur2={0x1, 0x8}], 0x1)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x6030000000138035, &(0x7f0000000600)=0x6})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000f86000/0x4000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x0)

21m24.489533954s ago: executing program 6 (id=1066):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000980)={0x0, &(0x7f0000000480)=[@hvc={0x32, 0x40, {0x84000006, [0x80, 0xb, 0x3, 0xb82, 0x1]}}, @irq_setup={0x46, 0x18, {0x2, 0x16c}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x36b}}, @irq_setup={0x46, 0x18, {0x3, 0x360}}, @memwrite={0x6e, 0x30, @generic={0x5000, 0x873, 0x2, 0x9}}, @svc={0x122, 0x40, {0xc400000c, [0x7fffffffffffffff, 0x3, 0x3, 0xb, 0x7]}}, @code={0xa, 0xb4, {"000000f9e0cd96d200c0b8f2610080d2820080d2830180d2840080d2020000d4007008d50000805280f59bd200a0b8f2210180d2e20180d2030080d2040080d2020000d4007008d5002c004e207788d20060b0f2a10180d2c20180d2a30180d2e40080d2020000d4604199d20000b0f2e10080d2020080d2630180d2840180d2020000d4c09081d200e0b0f2a10080d2c20080d2630080d2240180d2020000d4"}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x256}}, @eret={0xe6, 0x18, 0x8b}, @mrs={0xbe, 0x18, {0x603000000013c529}}, @irq_setup={0x46, 0x18, {0x1, 0x2b8}}, @svc={0x122, 0x40, {0xc4000001, [0x2, 0x7fffffffffffffff, 0x9, 0x11, 0x7fffffff]}}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @svc={0x122, 0x40, {0x3000004, [0xfb2, 0x3, 0x8000000000000000, 0x7, 0x3a]}}, @mrs={0xbe, 0x18, {0x603000000013e6dc}}, @memwrite={0x6e, 0x30, @generic={0x8000000, 0x5, 0xfffe000000000000, 0x1}}, @smc={0x1e, 0x40, {0x84000050, [0x559, 0x6d4, 0xb0, 0x3, 0x200]}}, @uexit={0x0, 0x18}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x6c, {"0094000f00e4000f000008d5e0c596d20040b8f2e10180d2c20180d2230180d2240080d2020000d40000a09b0020200d007008d5008000c8200c80d200e0b0f2210180d2820180d2a30080d2440080d2020000d4000028d5"}}, @code={0xa, 0x9c, {"e09e84d20000b0f2810180d2c20180d2a30180d2840180d2020000d460f48ad200a0b0f2410080d2620180d2c30180d2640180d2020000d4000008d5c09d93d20020b0f2010180d2220080d2c30180d2440180d2020000d40040204e007008d50000241e60139ad20080b0f2e10080d2e20180d2c30080d2e40180d2020000d4007008d5007008d5"}}, @hvc={0x32, 0x40, {0x1000, [0x4, 0x1c, 0x2, 0xe6a, 0x6]}}], 0x4c4}, &(0x7f00000009c0)=[@featur1={0x1, 0x9c}], 0x1)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000a40)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000a00)=0x19})
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000240)={0x659aa93486115af1, 0x0, {[0x1, 0x5, 0xffff, 0x8, 0x2, 0x7, 0xff, 0x641, 0x1, 0x53, 0x59, 0x3ff, 0x100000001, 0xcf3b, 0x8, 0x6], [0x8, 0x7, 0x4, 0x6, 0x7, 0x0, 0x4000000042, 0x2, 0x3, 0x1, 0xa, 0x8000000000000001, 0x8, 0x9, 0x8, 0x6], [0x31, 0x53, 0xe, 0x56b0, 0x5, 0x2, 0x4, 0x8, 0x1, 0x1, 0x9, 0xffffffffffffffff, 0x3, 0x9, 0x78], [0xd6ef, 0x9, 0x4, 0x5, 0x3ff, 0x0, 0x0, 0xd, 0x7, 0x80, 0xd, 0xabb, 0xffffffffffffffff, 0x623, 0x1, 0x2]}})

21m15.141618106s ago: executing program 7 (id=1067):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48e400, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x5000, 0x58000, 0x8, 0x45, 0x8, 0xc, 0x3, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x54000, 0x0, 0xff, 0x42, 0x5, 0x75, 0x6, 0xa, 0x4, 0x2, 0xff}, {0x0, 0x70000, 0x9, 0x5, 0x70, 0x7, 0x0, 0x9, 0x5, 0xa6, 0x5, 0x5}, {0x80a0000, 0x5000, 0x10, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x5000, 0xf, 0x3, 0x6, 0x7, 0xaf, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x100000, 0xffe, 0xf, 0xd3, 0x4, 0x6, 0x7, 0x3, 0x2, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x4, 0x5, 0x9, 0x5, 0x9, 0x6, 0x2, 0xa, 0xb0, 0x81}, {0xeeee0000, 0x2e}, {0x8000000, 0x7}, 0x80000039, 0x0, 0x3000, 0x2024, 0x8, 0x0, 0xffff1000, [0xd, 0x4, 0x6, 0x8]})
write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0)

21m6.417298448s ago: executing program 6 (id=1068):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000bb)
syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x40)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000b7c000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c})
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfe000/0x400000)=nil)
r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = eventfd2(0xfffffffa, 0x80001)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r12})
syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000180)={0x5000})
r13 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000040)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x4, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x80000000}}], 0x58}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r7, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})

20m58.33993734s ago: executing program 7 (id=1069):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x77) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x400454de, 0x800000110c23000a) (async)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000000c0)={0x3765, 0x3})
r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async, rerun: 32)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@memwrite={0x6e, 0x30, @generic={0xb000, 0xefe, 0x100, 0x8}}], 0x30}, &(0x7f0000000300)=[@featur2={0x1, 0x80}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x200000)
r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) (async, rerun: 64)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (rerun: 64)
ioctl$KVM_RUN(r13, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f0000000000)=0x3})
r14 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@eret={0xe6, 0x18}], 0x18}, &(0x7f0000000080)=[@featur2], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async)
syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

20m40.719949949s ago: executing program 6 (id=1070):
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000b46000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000)
munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async)
munmap(&(0x7f0000bc7000/0x4000)=nil, 0x4000) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000aec000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x7, 0x0, 0xfc, '\x00', 0x4})
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000100)=@arm64={0x4e, 0x2, 0x0, '\x00', 0x4}) (async)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000000)=@arm64)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20m34.833330072s ago: executing program 7 (id=1071):
r0 = eventfd2(0x101, 0x800)
write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffff7, 0x8)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0x0, 0x0, 0x101282, 0x0)
r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, 0x0}, 0x0, 0x0)
r6 = syz_kvm_vgic_v3_setup(r4, 0x2, 0xc0)
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000000)=0xfff})
syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x9, 0xffffffffffff4a09, 0x0})

20m18.051424571s ago: executing program 6 (id=1072):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_vgic_v3_setup(r2, 0x1, 0x100)
ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000e21000/0x1000)=nil, 0x0, r4})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r4})
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bfe000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000380)={0x0, &(0x7f0000000200)=[@mrs={0xbe, 0x18, {0x6030000000138045}}, @smc={0x1e, 0x40, {0x3f000000, [0x6ba8, 0x10001, 0xfffffffffffff4f1, 0x81, 0xffffffffffffffff]}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x6}}, @msr={0x14, 0x20, {0x603000000013c664, 0xb29e}}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x115}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0x4, 0x1, 0x5, 0x800, 0x2}}, @svc={0x122, 0x40, {0x3000000, [0x6, 0x0, 0x7ff, 0x2, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x2, 0xe}}], 0x170}, &(0x7f00000003c0)=[@featur2={0x1, 0x9}], 0x1)
ioctl$KVM_GET_SREGS(r8, 0x8000ae83, &(0x7f0000000400))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x4, <r11=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000580)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000540)=0xfffffffffffffc00})
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r12=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x9, 0xb, 0x0, 0x5, 0x6, 0x6, 0x26, 0x48, 0x86, 0xdd, 0x9, 0x0, 0x6, 0x973, 0xe, 0x2, 0x5, 0x0, '\x00', 0x10, 0x6})
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x29)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1)
r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_add_vcpu$arm64(r15, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffef3}, 0x0, 0x5)
syz_kvm_vgic_v3_setup(r14, 0x4, 0x80)
ioctl$KVM_IRQ_LINE(r14, 0x4008ae61, &(0x7f0000000040)={0x2000010, 0xbb28})
write$eventfd(r12, &(0x7f00000001c0)=0x3, 0x50)

20m11.979791545s ago: executing program 7 (id=1073):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x1})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r3, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000})
r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x8, <r10=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x1000000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0})
r11 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000380)=[@smc={0x1e, 0x40, {0x84000013, [0x5, 0xfffffffffffff02a, 0x1, 0xa3, 0xffff]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x2, 0x4, 0x8001, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x1, 0x10, 0x8000, 0x4f06, 0x1}}, @smc={0x1e, 0x40, {0x4, [0x7, 0x5, 0x7, 0xe00000000000000, 0xfffffffffffffff7]}}], 0xd0}, &(0x7f00000004c0)=[@featur1={0x1, 0xd0}], 0x1)
ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000540)=@arm64_ccsidr={0x6020000000110003, &(0x7f0000000500)=0x6})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r14, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a89000/0x400000)=nil)

19m53.765455542s ago: executing program 6 (id=1074):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0)
close(r2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)})
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x40000000200, 0x4000, 0x0, r7, 0x1})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r7, 0x3})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x4, r7, 0xf})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x6, 0xb0d2})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_extra={0x603000000013c036})

19m49.246950078s ago: executing program 7 (id=1075):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0xc1, 0xf, 0x0, 0x5, 0x6, 0x86, 0xfe, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x93a, 0x20, 0x3, 0x4, 0x8, '\x00', 0x3, 0x8093})
write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0xfffffffffffffff7})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r15, 0x1, 0x11, r14, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)

19m6.309167691s ago: executing program 38 (id=1074):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x1, 0x0)
close(r2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f00000000c0)})
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = eventfd2(0xeffffffd, 0x801)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x40000000200, 0x4000, 0x0, r7, 0x1})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r7, 0x3})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x4, r7, 0xf})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r1, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x6, 0xb0d2})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_extra={0x603000000013c036})

18m59.860808644s ago: executing program 39 (id=1075):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x17}], 0x1)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0xc1, 0xf, 0x0, 0x5, 0x6, 0x86, 0xfe, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x93a, 0x20, 0x3, 0x4, 0x8, '\x00', 0x3, 0x8093})
write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef)
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r11 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f00000001c0)={0x8, <r13=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0xfffffffffffffff7})
ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0})
r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0)
r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r15, 0x1, 0x11, r14, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04)

3m21.607057506s ago: executing program 8 (id=1106):
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, &(0x7f0000000140)={0x1})
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27)
r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @memwrite={0x6e, 0x30, @generic={0xeeee8000, 0xe58, 0x2, 0x4}}], 0x58}, 0x0, 0x0)
syz_kvm_vgic_v3_setup(r6, 0x1, 0x100)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r11 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r10, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r10, 0x0)
r12 = eventfd2(0x70, 0x0)
close(r12)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0)
write$eventfd(r12, &(0x7f0000000100)=0xfffffffffffffffe, 0x8)
r13 = eventfd2(0x0, 0x0)
close(r13)
r14 = eventfd2(0x0, 0x0)
close(r14)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0cc2, 0x0)
mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x0, 0x2000009, 0x2011, r10, 0x0)

3m18.940272602s ago: executing program 9 (id=1107):
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181b03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r2, 0x400454d8, 0x110c230005)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, <r8=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x4, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6})
write$eventfd(r8, &(0x7f00000001c0)=0x9, 0x5d)
syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000300)=@arm64_ccsidr={0x6020000000110006, 0x0})

2m43.937532877s ago: executing program 8 (id=1108):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x40)
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000)
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000000))
r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@msr={0x14, 0x20, {0x603000000013d801, 0xd}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x3, 0x4, 0x8, 0x4, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013e6da}}, @its_setup={0x82, 0xfffffffffffffd53, {0x3, 0x2, 0x4e}}, @msr={0x14, 0x20, {0x603000000013c031}}, @uexit={0x0, 0x18, 0x2}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x188}}, @uexit={0x0, 0x18, 0x1}, @msr={0x14, 0x20, {0x0, 0xae}}, @irq_setup={0x46, 0x18, {0x4, 0x293}}], 0x138}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_vgic_v3_setup(r1, 0x3, 0xc0)

2m42.82991851s ago: executing program 9 (id=1109):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b)
ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000040)={0x4000072, 0x1})
r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000240))
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0xffffffff, 0x13000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000140)={0x58000, 0x6000})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38)
ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000000)={0xf7f59fff, 0xf000, 0x7f, 0x1, 0x2})
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcf3, 0x8000}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28)
r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil)
r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r14, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x6, 0x81, 0x2, '\x00', 0x20000000006})
ioctl$KVM_GET_MP_STATE(r14, 0x8004ae98, &(0x7f0000000000))
r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vm(r16, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2m18.407051003s ago: executing program 8 (id=1110):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x800454d2, 0x40)
r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil)
r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r8, 0x1, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100006, &(0x7f0000000000)=0x4})
r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r12, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xb})

2m11.909624232s ago: executing program 9 (id=1111):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7e) (async)
r1 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa2180, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0x5450, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000000004)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x7}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000000)={0x5, 0x4})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x3000)=nil, 0x0, 0x1000003, 0x10, r4, 0x0) (async)
close(0x3)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) (async)
r8 = openat$kvm(0x0, &(0x7f0000000080), 0x5000c0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000380)="fb0149dd033be3acc5aba29ea6ab8031d1dfd92f00000000010000005a9614fb707cd24b7eebb20700000002010000000000000000000800", 0x0, 0x46) (async)
munmap$KVM_VCPU(0x0, 0x1000000000)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) (async)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
ioctl$KVM_SET_MP_STATE(r13, 0x4004ae99, 0x0)

1m41.681892906s ago: executing program 9 (id=1112):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200a81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)

1m40.519355583s ago: executing program 8 (id=1113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
munmap$KVM_VCPU(0x0, 0x1000000000) (async)
munmap$KVM_VCPU(0x0, 0x1000000000)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000e, 0x24132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xfffffffffffffffb}) (async)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xfffffffffffffffb})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="caf9d6ac7953c5a4571996b36c0135c684c5c0d4fad93b80dd7cb2b66d542f6173f233a6e1606154cf719c2550e01ad56fce42d3686e6f9b00a64f3728849edd28e62dda6398ff0f", 0x0, 0x48)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1m23.479392186s ago: executing program 9 (id=1114):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x40000000000001, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0xf, 0x0, 0x9, 0x2}}], 0x50}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8})
ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100048, &(0x7f0000000240)=0xd7})
syz_kvm_vgic_v3_setup(r1, 0x1, 0x80)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m18.40964044s ago: executing program 8 (id=1115):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
r4 = eventfd2(0x0, 0x0)
close(r4) (async, rerun: 64)
openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) (rerun: 64)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000013000/0x1000)=nil, r5, 0x8, 0x2010, r2, 0x0)
write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3)
r6 = mmap$KVM_VCPU(&(0x7f0000dd4000/0x3000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, 0x0, 0x0, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0)
eventfd2(0x0, 0x0)
syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r1, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000580)=[{0x0, &(0x7f0000000380)=[@hvc={0x32, 0x40, {0x30000000, [0xf2d, 0x7, 0x2, 0x2, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0xd, 0x0, 0x8000, 0x4}}, @smc={0x1e, 0x40, {0x200, [0x7777, 0x3, 0x628, 0x9, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013c2b0}}, @irq_setup={0x46, 0x18, {0x1, 0x38c}}, @msr={0x14, 0x20, {0xdb51, 0x5e8e}}, @hvc={0x32, 0x40, {0x40000176, [0x3, 0x6, 0x7f, 0x8, 0x6]}}, @hvc={0x32, 0x40, {0x400, [0x8, 0x8, 0x4, 0x40, 0x4]}}, @code={0xa, 0x3c, {"007c4093000028d5008008d5000028d5007008d5000c803c0080800d007008d5000008d5007008d5"}}, @mrs={0xbe, 0x18, {0x6030000000138077}}, @eret={0xe6, 0x18, 0x1}, @mrs={0xbe, 0x18, {0x603000000013dce0}}], 0x1fc}], 0x1, 0x0, &(0x7f00000005c0)=[@featur2={0x1, 0x60}], 0x1)
openat$kvm(0xffffff9c, 0x0, 0x1a17f2, 0x1f01)
ioctl$KVM_SET_REGS(r7, 0x4360ae82, &(0x7f00000001c0)={[0x4936, 0xd4, 0x100000001, 0x78, 0x0, 0x6, 0x25b3, 0x9, 0x6, 0x6, 0xc8, 0x8000000000000001, 0x5, 0x2e, 0xffffffffffffee7f, 0xcb], 0xeeee0000, 0x100080})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async)
r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$arm64(r10, r12, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000200)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000240)=[@featur1={0x1, 0x8}], 0x1)

58.720131257s ago: executing program 9 (id=1116):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x300)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x42)

54.219276274s ago: executing program 8 (id=1117):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x1000009, 0x4000010, r1, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="322f136217cc7f1e9ce53b22717892fc8e410d0e51764e3c9ef670a0f2e1ddf7a4ab314e507cedc7d197182d95e29d8f5c24242120a7a72534f09190f071a74b26a250bbaa1de2f4", 0x0, 0x48)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x7})

9.349673346s ago: executing program 40 (id=1116):
r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x300)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x42)

0s ago: executing program 41 (id=1117):
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r4, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0})
r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1)
syz_kvm_vgic_v3_setup(r1, 0x1, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000040)=0xe7})
r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x1000009, 0x4000010, r1, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f00000001c0)="322f136217cc7f1e9ce53b22717892fc8e410d0e51764e3c9ef670a0f2e1ddf7a4ab314e507cedc7d197182d95e29d8f5c24242120a7a72534f09190f071a74b26a250bbaa1de2f4", 0x0, 0x48)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000080)=0x7})

kernel console output (not intermixed with test programs):

[  370.695361][   T24] audit: type=1400 audit(369.880:75): avc:  denied  { write } for  pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  374.697339][   T24] audit: type=1400 audit(373.840:76): avc:  denied  { write } for  pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.369331][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.540903][   T24] audit: type=1400 audit(383.730:77): avc:  denied  { write } for  pid=3267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.046708][   T24] audit: type=1400 audit(389.220:78): avc:  denied  { write } for  pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.216470][   T24] audit: type=1400 audit(407.400:79): avc:  denied  { write } for  pid=3277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.036170][   T24] audit: type=1400 audit(411.190:80): avc:  denied  { write } for  pid=3280 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  422.230060][   T24] audit: type=1400 audit(421.420:81): avc:  denied  { write } for  pid=3285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  425.965534][   T24] audit: type=1400 audit(425.140:82): avc:  denied  { write } for  pid=3288 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  428.611820][ T3205] eql: remember to turn off Van-Jacobson compression on your slave devices
[  435.563095][   T24] audit: type=1400 audit(434.750:83): avc:  denied  { write } for  pid=3292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  439.385622][   T24] audit: type=1400 audit(438.560:84): avc:  denied  { write } for  pid=3295 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  451.306663][   T24] audit: type=1400 audit(450.490:85): avc:  denied  { write } for  pid=3300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.467857][   T24] audit: type=1400 audit(455.660:86): avc:  denied  { write } for  pid=3303 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  463.775410][   T24] audit: type=1400 audit(462.910:87): avc:  denied  { write } for  pid=3305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  467.645324][   T24] audit: type=1400 audit(466.830:88): avc:  denied  { write } for  pid=3308 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.626806][   T24] audit: type=1400 audit(478.800:89): avc:  denied  { write } for  pid=3314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.348581][   T24] audit: type=1400 audit(482.530:90): avc:  denied  { write } for  pid=3317 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  488.873323][   T24] audit: type=1400 audit(488.060:91): avc:  denied  { write } for  pid=3319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  492.735780][   T24] audit: type=1400 audit(491.920:92): avc:  denied  { write } for  pid=3322 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  508.106275][   T24] audit: type=1400 audit(507.280:93): avc:  denied  { write } for  pid=3329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  512.486390][   T24] audit: type=1400 audit(511.670:94): avc:  denied  { write } for  pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  536.346425][   T24] audit: type=1400 audit(535.490:95): avc:  denied  { write } for  pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  540.128863][   T24] audit: type=1400 audit(539.320:96): avc:  denied  { write } for  pid=3344 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  547.278387][   T24] audit: type=1400 audit(546.470:97): avc:  denied  { write } for  pid=3348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  551.046579][   T24] audit: type=1400 audit(550.210:98): avc:  denied  { write } for  pid=3351 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  560.377165][   T24] audit: type=1400 audit(559.550:99): avc:  denied  { write } for  pid=3353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  564.373743][   T24] audit: type=1400 audit(563.560:100): avc:  denied  { write } for  pid=3356 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:31776' (ED25519) to the list of known hosts.
[  597.281779][   T24] audit: type=1400 audit(596.470:101): avc:  denied  { name_bind } for  pid=3361 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  598.135904][   T24] audit: type=1400 audit(597.310:102): avc:  denied  { execute } for  pid=3362 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  598.145812][   T24] audit: type=1400 audit(597.320:103): avc:  denied  { execute_no_trans } for  pid=3362 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  623.318568][   T24] audit: type=1400 audit(622.510:104): avc:  denied  { mounton } for  pid=3362 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  623.356837][   T24] audit: type=1400 audit(622.540:105): avc:  denied  { mount } for  pid=3362 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  623.463318][ T3362] cgroup: Unknown subsys name 'net'
[  623.518644][   T24] audit: type=1400 audit(622.710:106): avc:  denied  { unmount } for  pid=3362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  623.938030][ T3362] cgroup: Unknown subsys name 'cpuset'
[  624.050210][ T3362] cgroup: Unknown subsys name 'rlimit'
[  624.936683][   T24] audit: type=1400 audit(624.110:107): avc:  denied  { setattr } for  pid=3362 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  624.943858][   T24] audit: type=1400 audit(624.120:108): avc:  denied  { mounton } for  pid=3362 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  624.966475][   T24] audit: type=1400 audit(624.150:109): avc:  denied  { mount } for  pid=3362 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  625.948066][ T3366] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  625.965853][   T24] audit: type=1400 audit(625.150:110): avc:  denied  { relabelto } for  pid=3366 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  625.995386][   T24] audit: type=1400 audit(625.180:111): avc:  denied  { write } for  pid=3366 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[  626.173464][   T24] audit: type=1400 audit(625.360:112): avc:  denied  { read } for  pid=3362 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  626.193466][   T24] audit: type=1400 audit(625.380:113): avc:  denied  { open } for  pid=3362 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  626.241731][ T3362] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  685.540580][   T24] audit: type=1400 audit(684.730:114): avc:  denied  { execmem } for  pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  689.377268][   T24] audit: type=1400 audit(688.540:115): avc:  denied  { read } for  pid=3369 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  689.392476][   T24] audit: type=1400 audit(688.580:116): avc:  denied  { open } for  pid=3370 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  689.449373][   T24] audit: type=1400 audit(688.620:117): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  689.672555][   T24] audit: type=1400 audit(688.860:118): avc:  denied  { module_request } for  pid=3370 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  689.708136][   T24] audit: type=1400 audit(688.870:119): avc:  denied  { module_request } for  pid=3369 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  690.673425][   T24] audit: type=1400 audit(689.860:120): avc:  denied  { sys_module } for  pid=3369 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  715.962746][ T3369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.216792][ T3369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.276927][ T3370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.676759][ T3370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.183207][ T3369] hsr_slave_0: entered promiscuous mode
[  728.212294][ T3369] hsr_slave_1: entered promiscuous mode
[  729.389755][ T3370] hsr_slave_0: entered promiscuous mode
[  729.421568][ T3370] hsr_slave_1: entered promiscuous mode
[  729.451884][ T3370] debugfs: 'hsr0' already exists in 'hsr'
[  729.466943][ T3370] Cannot create hsr debugfs directory
[  734.982334][   T24] audit: type=1400 audit(734.150:121): avc:  denied  { create } for  pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  735.028380][   T24] audit: type=1400 audit(734.210:122): avc:  denied  { write } for  pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  735.065714][   T24] audit: type=1400 audit(734.250:123): avc:  denied  { read } for  pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  735.217844][ T3369] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  735.599009][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  735.723592][ T3369] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  735.929429][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  735.993481][ T3369] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  736.169302][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  736.350124][ T3369] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  736.483602][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  737.791604][ T3370] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  737.902908][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  738.019414][ T3370] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.140500][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  738.228479][ T3370] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  738.409729][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  738.502843][ T3370] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  738.660669][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  750.486826][ T3369] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.653853][ T3370] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.486079][   T24] audit: type=1400 audit(772.670:124): avc:  denied  { write } for  pid=3475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  779.706056][   T24] audit: type=1400 audit(778.890:125): avc:  denied  { write } for  pid=3485 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  808.898892][ T3369] veth0_vlan: entered promiscuous mode
[  809.467579][ T3369] veth1_vlan: entered promiscuous mode
[  811.133731][ T3370] veth0_vlan: entered promiscuous mode
[  811.977772][ T3369] veth0_macvtap: entered promiscuous mode
[  812.187407][ T3370] veth1_vlan: entered promiscuous mode
[  812.378944][ T3369] veth1_macvtap: entered promiscuous mode
[  814.856996][ T3370] veth0_macvtap: entered promiscuous mode
[  814.938119][ T3383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.982889][ T3383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.993359][ T3383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.005749][ T3383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.432783][ T3370] veth1_macvtap: entered promiscuous mode
[  817.660671][   T24] audit: type=1400 audit(816.810:126): avc:  denied  { mount } for  pid=3369 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  818.126948][   T24] audit: type=1400 audit(817.150:127): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/syzkaller.PneKuw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  818.361475][   T24] audit: type=1400 audit(817.550:128): avc:  denied  { mount } for  pid=3369 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  818.957784][   T24] audit: type=1400 audit(818.140:129): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/syzkaller.PneKuw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  819.120762][   T24] audit: type=1400 audit(818.310:130): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/syzkaller.PneKuw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  819.197832][   T21] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.198983][   T21] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.207790][   T21] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.216504][   T21] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.061306][   T24] audit: type=1400 audit(819.250:131): avc:  denied  { unmount } for  pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  820.605611][   T24] audit: type=1400 audit(819.790:132): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  820.866429][   T24] audit: type=1400 audit(820.050:133): avc:  denied  { mount } for  pid=3369 comm="syz-executor" name="/" dev="gadgetfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  821.166898][   T24] audit: type=1400 audit(820.340:134): avc:  denied  { mount } for  pid=3369 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  821.385681][   T24] audit: type=1400 audit(820.530:135): avc:  denied  { mounton } for  pid=3369 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  823.311201][ T3369] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  825.087102][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  825.101455][   T24] audit: type=1400 audit(824.220:137): avc:  denied  { read write } for  pid=3369 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  825.212343][   T24] audit: type=1400 audit(824.320:138): avc:  denied  { open } for  pid=3369 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  825.213634][   T24] audit: type=1400 audit(824.380:139): avc:  denied  { ioctl } for  pid=3369 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  837.150549][   T24] audit: type=1400 audit(836.340:140): avc:  denied  { read write } for  pid=3526 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  837.227890][   T24] audit: type=1400 audit(836.400:141): avc:  denied  { open } for  pid=3526 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  837.347843][   T24] audit: type=1400 audit(836.480:142): avc:  denied  { ioctl } for  pid=3526 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  843.349942][   T24] audit: type=1400 audit(842.540:143): avc:  denied  { append } for  pid=3528 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  843.856681][   T24] audit: type=1400 audit(843.030:144): avc:  denied  { create } for  pid=3528 comm="syz.0.1" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  843.957580][   T24] audit: type=1400 audit(843.140:145): avc:  denied  { map } for  pid=3528 comm="syz.0.1" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  844.020833][   T24] audit: type=1400 audit(843.180:146): avc:  denied  { read } for  pid=3528 comm="syz.0.1" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  844.286998][   T24] audit: type=1400 audit(843.470:147): avc:  denied  { write } for  pid=3528 comm="syz.0.1" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  886.585576][   T24] audit: type=1400 audit(885.770:148): avc:  denied  { execute } for  pid=3557 comm="syz.1.10" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1026.016007][   T24] audit: type=1400 audit(1025.200:149): avc:  denied  { map } for  pid=3634 comm="syz.1.37" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1026.077737][   T24] audit: type=1400 audit(1025.230:150): avc:  denied  { execute } for  pid=3634 comm="syz.1.37" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1080.356007][   T24] audit: type=1400 audit(1079.510:151): avc:  denied  { ioctl } for  pid=3673 comm="syz.0.48" path="net:[4026532627]" dev="nsfs" ino=4026532627 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1174.071525][ T3732] debugfs: 'vgic-its-state@8080000' already exists in '3732-5'
[ 1222.376738][   T24] audit: type=1400 audit(1221.520:152): avc:  denied  { write } for  pid=3759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1230.036791][   T24] audit: type=1400 audit(1229.220:153): avc:  denied  { write } for  pid=3767 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1329.996451][   T24] audit: type=1400 audit(1329.170:154): avc:  denied  { setattr } for  pid=3828 comm="syz.0.97" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1331.386206][ T3827] kvm [3827]: Failed to find VMA for hva 0x20d8d000
[ 1535.779834][   T24] audit: type=1400 audit(1534.960:155): avc:  denied  { execute } for  pid=3946 comm="syz.1.135" path=2F36362F10FBFF67525673312B0104 dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1571.422027][   T24] audit: type=1400 audit(1570.610:156): avc:  denied  { write } for  pid=3969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1573.369157][ T3970] debugfs: 'vgic-its-state@8080000' already exists in '3970-4'
[ 1580.056147][   T24] audit: type=1400 audit(1579.240:157): avc:  denied  { write } for  pid=3978 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1647.130632][ T4021] kvm [4021]: Failed to find VMA for hva 0x20c01000
[ 2070.385759][   T24] audit: type=1400 audit(2069.570:158): avc:  denied  { write } for  pid=4256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2078.129155][   T24] audit: type=1400 audit(2077.210:159): avc:  denied  { write } for  pid=4266 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2102.163477][ T4279] kvm [4279]: Failed to find VMA for hva 0x20c01000
[ 2352.395819][   T24] audit: type=1400 audit(2351.550:160): avc:  denied  { write } for  pid=4424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2360.342456][   T24] audit: type=1400 audit(2359.530:161): avc:  denied  { write } for  pid=4436 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2701.745674][   T24] audit: type=1400 audit(2700.910:162): avc:  denied  { write } for  pid=4637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2711.296297][   T24] audit: type=1400 audit(2710.450:163): avc:  denied  { write } for  pid=4645 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2875.068210][   T24] audit: type=1400 audit(2874.250:164): avc:  denied  { map } for  pid=4736 comm="syz.1.385" path="pipe:[2741]" dev="pipefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2875.118641][   T24] audit: type=1400 audit(2874.300:165): avc:  denied  { execute } for  pid=4736 comm="syz.1.385" path="pipe:[2741]" dev="pipefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2932.199667][ T4777] debugfs: 'vgic-its-state@8080000' already exists in '4777-4'
[ 3172.389805][ T4926] kvm [4926]: Failed to find VMA for hva 0x20d8d000
[ 3242.465179][   T24] audit: type=1400 audit(3241.650:166): avc:  denied  { write } for  pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3252.120598][   T24] audit: type=1400 audit(3251.290:167): avc:  denied  { write } for  pid=4965 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3460.096503][   T24] audit: type=1400 audit(3459.270:168): avc:  denied  { write } for  pid=5068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3467.997830][   T24] audit: type=1400 audit(3467.170:169): avc:  denied  { write } for  pid=5079 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3509.090665][ T5101] kvm [5100]: Unsupported guest access at: eeef0000
[ 3509.090665][ T5101]  { Op0( 2), Op1( 0), CRn( 0), CRm( 6), Op2( 2), func_read },
[ 3622.403385][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3623.029754][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3634.532222][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3635.151719][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3646.290849][ T5113] hsr_slave_0: entered promiscuous mode
[ 3646.368898][ T5113] hsr_slave_1: entered promiscuous mode
[ 3646.413320][ T5113] debugfs: 'hsr0' already exists in 'hsr'
[ 3646.425432][ T5113] Cannot create hsr debugfs directory
[ 3666.212070][ T5121] hsr_slave_0: entered promiscuous mode
[ 3666.359297][ T5121] hsr_slave_1: entered promiscuous mode
[ 3666.458030][ T5121] debugfs: 'hsr0' already exists in 'hsr'
[ 3666.485696][ T5121] Cannot create hsr debugfs directory
[ 3672.501632][ T4154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3673.960071][ T4154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3676.041961][ T4154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3677.032808][ T5113] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3677.130327][ T5113] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3677.448221][ T4154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3677.622088][ T5113] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3677.790259][ T5113] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3678.418571][ T5113] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3678.522132][ T5113] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3678.877484][ T5113] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3678.961081][ T5113] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3691.713833][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3691.828349][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3691.905561][ T4154] bond0 (unregistering): Released all slaves
[ 3694.397594][ T4154] hsr_slave_0: left promiscuous mode
[ 3694.578000][ T4154] hsr_slave_1: left promiscuous mode
[ 3695.182885][ T4154] veth1_macvtap: left promiscuous mode
[ 3695.197129][ T4154] veth0_macvtap: left promiscuous mode
[ 3695.227545][ T4154] veth1_vlan: left promiscuous mode
[ 3695.231607][ T4154] veth0_vlan: left promiscuous mode
[ 3711.683272][ T5121] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3712.211643][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3712.340913][ T5121] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3712.830571][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3713.049882][ T5121] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3713.449828][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3713.513337][ T5121] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3713.797981][ T5121] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3717.179592][ T4154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3719.288822][ T4154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3720.819489][ T4154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3723.258286][ T4154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3727.635844][   T24] audit: type=1400 audit(3726.810:170): avc:  denied  { write } for  pid=5212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3731.262313][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3736.400882][   T24] audit: type=1400 audit(3735.590:171): avc:  denied  { write } for  pid=5220 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3742.748944][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3742.858318][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3742.908766][ T4154] bond0 (unregistering): Released all slaves
[ 3743.679665][ T3205] 8021q: adding VLAN 0 to HW filter on device eth1
[ 3744.167948][ T4154] hsr_slave_0: left promiscuous mode
[ 3744.238461][ T4154] hsr_slave_1: left promiscuous mode
[ 3744.485671][ T4154] veth1_macvtap: left promiscuous mode
[ 3744.489222][ T4154] veth0_macvtap: left promiscuous mode
[ 3744.508913][ T4154] veth1_vlan: left promiscuous mode
[ 3744.546391][ T4154] veth0_vlan: left promiscuous mode
[ 3765.981649][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3774.033276][   T24] audit: type=1400 audit(3773.220:172): avc:  denied  { write } for  pid=5235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3782.436393][   T24] audit: type=1400 audit(3781.620:173): avc:  denied  { write } for  pid=5243 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3789.387074][ T3205] 8021q: adding VLAN 0 to HW filter on device eth2
[ 3803.795823][   T24] audit: type=1400 audit(3802.910:174): avc:  denied  { write } for  pid=5257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3809.767657][   T24] audit: type=1400 audit(3808.930:175): avc:  denied  { write } for  pid=5267 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3813.809480][ T3205] 8021q: adding VLAN 0 to HW filter on device eth3
[ 3825.676647][   T24] audit: type=1400 audit(3824.850:176): avc:  denied  { write } for  pid=5281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3832.189140][   T24] audit: type=1400 audit(3831.380:177): avc:  denied  { write } for  pid=5291 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3837.092558][ T3205] 8021q: adding VLAN 0 to HW filter on device eth4
[ 3846.938827][ T5113] veth0_vlan: entered promiscuous mode
[ 3847.887705][ T5113] veth1_vlan: entered promiscuous mode
[ 3851.083499][ T5113] veth0_macvtap: entered promiscuous mode
[ 3851.711418][ T5113] veth1_macvtap: entered promiscuous mode
[ 3853.330034][   T24] audit: type=1400 audit(3852.520:178): avc:  denied  { write } for  pid=5305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3856.068369][ T5121] veth0_vlan: entered promiscuous mode
[ 3856.611708][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3856.626437][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3856.646434][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3856.651889][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3858.087658][ T5121] veth1_vlan: entered promiscuous mode
[ 3861.623603][   T24] audit: type=1400 audit(3860.810:179): avc:  denied  { write } for  pid=5309 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3862.648488][ T5121] veth0_macvtap: entered promiscuous mode
[ 3862.928134][   T24] audit: type=1400 audit(3862.110:180): avc:  denied  { unmount } for  pid=5113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 3863.349921][ T5121] veth1_macvtap: entered promiscuous mode
[ 3866.479123][ T3205] 8021q: adding VLAN 0 to HW filter on device eth5
[ 3866.649408][ T3465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3866.653478][ T3465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3866.918017][ T3465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3866.923434][ T3465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3886.131836][   T24] audit: type=1400 audit(3885.230:181): avc:  denied  { write } for  pid=5321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3895.837761][   T24] audit: type=1400 audit(3895.020:182): avc:  denied  { write } for  pid=5328 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3903.152525][ T3205] 8021q: adding VLAN 0 to HW filter on device eth6
[ 3926.147172][   T24] audit: type=1400 audit(3925.320:183): avc:  denied  { write } for  pid=5345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3936.108005][   T24] audit: type=1400 audit(3935.260:184): avc:  denied  { write } for  pid=5352 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3943.103885][ T3205] 8021q: adding VLAN 0 to HW filter on device eth7
[ 3970.941392][   T24] audit: type=1400 audit(3970.120:185): avc:  denied  { write } for  pid=5371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3981.637069][   T24] audit: type=1400 audit(3980.800:186): avc:  denied  { write } for  pid=5381 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 3989.299316][ T3205] 8021q: adding VLAN 0 to HW filter on device eth8
[ 4039.636458][   T24] audit: type=1400 audit(4038.750:187): avc:  denied  { write } for  pid=5414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4050.688252][   T24] audit: type=1400 audit(4049.850:188): avc:  denied  { write } for  pid=5419 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4075.339092][   T24] audit: type=1400 audit(4074.520:189): avc:  denied  { write } for  pid=5442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4087.592964][   T24] audit: type=1400 audit(4086.760:190): avc:  denied  { write } for  pid=5451 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4105.378968][   T24] audit: type=1400 audit(4104.560:191): avc:  denied  { write } for  pid=5456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4115.441764][   T24] audit: type=1400 audit(4114.590:192): avc:  denied  { write } for  pid=5466 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4143.528347][   T24] audit: type=1400 audit(4142.710:193): avc:  denied  { write } for  pid=5483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4154.971496][   T24] audit: type=1400 audit(4154.130:194): avc:  denied  { write } for  pid=5488 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4174.350776][   T24] audit: type=1400 audit(4173.500:195): avc:  denied  { write } for  pid=5497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4184.261652][   T24] audit: type=1400 audit(4183.360:196): avc:  denied  { write } for  pid=5506 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4212.616415][   T24] audit: type=1400 audit(4211.790:197): avc:  denied  { write } for  pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4224.138807][   T24] audit: type=1400 audit(4223.320:198): avc:  denied  { write } for  pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4257.856860][   T24] audit: type=1400 audit(4257.020:199): avc:  denied  { write } for  pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4269.146087][   T24] audit: type=1400 audit(4268.320:200): avc:  denied  { write } for  pid=5553 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4293.801869][   T24] audit: type=1400 audit(4292.950:201): avc:  denied  { write } for  pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4304.006375][   T24] audit: type=1400 audit(4303.160:202): avc:  denied  { write } for  pid=5574 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4322.232352][   T24] audit: type=1400 audit(4321.300:203): avc:  denied  { write } for  pid=5583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4334.368421][   T24] audit: type=1400 audit(4333.430:204): avc:  denied  { write } for  pid=5590 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4534.825180][   T24] audit: type=1400 audit(4534.000:205): avc:  denied  { write } for  pid=5706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4544.649918][   T24] audit: type=1400 audit(4543.820:206): avc:  denied  { write } for  pid=5715 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4797.739108][ T5836] FAULT_INJECTION: forcing a failure.
[ 4797.739108][ T5836] name failslab, interval 1, probability 0, space 0, times 1
[ 4797.750648][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz.3.628 Not tainted syzkaller #0 PREEMPT 
[ 4797.751331][ T5836] Hardware name: linux,dummy-virt (DT)
[ 4797.751828][ T5836] Call trace:
[ 4797.752228][ T5836]  show_stack+0x2c/0x3c (C)
[ 4797.754293][ T5836]  __dump_stack+0x30/0x40
[ 4797.754699][ T5836]  dump_stack_lvl+0xd8/0x12c
[ 4797.755048][ T5836]  dump_stack+0x1c/0x28
[ 4797.755378][ T5836]  should_fail_ex+0x56c/0x6d8
[ 4797.755639][ T5836]  should_failslab+0xb8/0xec
[ 4797.755940][ T5836]  kmem_cache_alloc_noprof+0x90/0x4c4
[ 4797.756211][ T5836]  security_file_alloc+0x38/0x32c
[ 4797.756494][ T5836]  init_file+0xb0/0x314
[ 4797.756744][ T5836]  alloc_empty_file+0x80/0x188
[ 4797.756984][ T5836]  alloc_file_pseudo+0xf0/0x1e8
[ 4797.757232][ T5836]  hugetlb_file_setup+0x364/0x544
[ 4797.757564][ T5836]  ksys_mmap_pgoff+0x170/0x448
[ 4797.757862][ T5836]  __arm64_sys_mmap+0x13c/0x198
[ 4797.758169][ T5836]  invoke_syscall+0x94/0x1ec
[ 4797.758502][ T5836]  el0_svc_common+0x120/0x2f4
[ 4797.758821][ T5836]  do_el0_svc+0x58/0x74
[ 4797.759124][ T5836]  el0_svc+0x60/0x238
[ 4797.759406][ T5836]  el0t_64_sync_handler+0x84/0x12c
[ 4797.759704][ T5836]  el0t_64_sync+0x198/0x19c
[ 4909.658452][ T5888] kvm [5888]: Failed to find VMA for hva 0x20c01000
[ 5115.073891][   T24] audit: type=1400 audit(5114.260:207): avc:  denied  { write } for  pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5126.029063][   T24] audit: type=1400 audit(5125.210:208): avc:  denied  { write } for  pid=6007 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5151.021377][ T6026] FAULT_INJECTION: forcing a failure.
[ 5151.021377][ T6026] name failslab, interval 1, probability 0, space 0, times 0
[ 5151.057469][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT 
[ 5151.057865][ T6026] Hardware name: linux,dummy-virt (DT)
[ 5151.057969][ T6026] Call trace:
[ 5151.058047][ T6026]  show_stack+0x2c/0x3c (C)
[ 5151.058472][ T6026]  __dump_stack+0x30/0x40
[ 5151.058798][ T6026]  dump_stack_lvl+0xd8/0x12c
[ 5151.059110][ T6026]  dump_stack+0x1c/0x28
[ 5151.059444][ T6026]  should_fail_ex+0x56c/0x6d8
[ 5151.059708][ T6026]  should_failslab+0xb8/0xec
[ 5151.060005][ T6026]  kmem_cache_alloc_noprof+0x90/0x4c4
[ 5151.060275][ T6026]  __anon_vma_prepare+0xfc/0x55c
[ 5151.060538][ T6026]  do_pte_missing+0x1e3c/0x3788
[ 5151.060791][ T6026]  handle_mm_fault+0x1714/0x2c08
[ 5151.061021][ T6026]  __get_user_pages+0x2b98/0x369c
[ 5151.061329][ T6026]  populate_vma_page_range+0x234/0x318
[ 5151.061620][ T6026]  __mm_populate+0x198/0x350
[ 5151.061888][ T6026]  vm_mmap_pgoff+0x310/0x3cc
[ 5151.062164][ T6026]  ksys_mmap_pgoff+0xec/0x448
[ 5151.062471][ T6026]  __arm64_sys_mmap+0x13c/0x198
[ 5151.062784][ T6026]  invoke_syscall+0x94/0x1ec
[ 5151.063091][ T6026]  el0_svc_common+0x120/0x2f4
[ 5151.063432][ T6026]  do_el0_svc+0x58/0x74
[ 5151.063772][ T6026]  el0_svc+0x60/0x238
[ 5151.064047][ T6026]  el0t_64_sync_handler+0x84/0x12c
[ 5151.064347][ T6026]  el0t_64_sync+0x198/0x19c
[ 5199.759328][ T6051] FAULT_INJECTION: forcing a failure.
[ 5199.759328][ T6051] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 5199.770980][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT 
[ 5199.771402][ T6051] Hardware name: linux,dummy-virt (DT)
[ 5199.771539][ T6051] Call trace:
[ 5199.771625][ T6051]  show_stack+0x2c/0x3c (C)
[ 5199.772012][ T6051]  __dump_stack+0x30/0x40
[ 5199.772354][ T6051]  dump_stack_lvl+0xd8/0x12c
[ 5199.772693][ T6051]  dump_stack+0x1c/0x28
[ 5199.773002][ T6051]  should_fail_ex+0x56c/0x6d8
[ 5199.773250][ T6051]  should_fail+0x14/0x24
[ 5199.773489][ T6051]  should_fail_usercopy+0x20/0x30
[ 5199.773725][ T6051]  simple_read_from_buffer+0xd0/0x294
[ 5199.774022][ T6051]  proc_fail_nth_read+0x184/0x214
[ 5199.774362][ T6051]  vfs_read+0x220/0x9d8
[ 5199.774704][ T6051]  ksys_read+0x108/0x1fc
[ 5199.775025][ T6051]  __arm64_sys_read+0x98/0xcc
[ 5199.775309][ T6051]  invoke_syscall+0x94/0x1ec
[ 5199.775679][ T6051]  el0_svc_common+0x120/0x2f4
[ 5199.775994][ T6051]  do_el0_svc+0x58/0x74
[ 5199.776316][ T6051]  el0_svc+0x60/0x238
[ 5199.776600][ T6051]  el0t_64_sync_handler+0x84/0x12c
[ 5199.776864][ T6051]  el0t_64_sync+0x198/0x19c
[ 5511.416924][   T24] audit: type=1400 audit(5510.590:209): avc:  denied  { write } for  pid=6197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5521.293356][   T24] audit: type=1400 audit(5520.450:210): avc:  denied  { write } for  pid=6209 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5890.946757][   T24] audit: type=1400 audit(5890.100:211): avc:  denied  { write } for  pid=6404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5902.307861][   T24] audit: type=1400 audit(5901.460:212): avc:  denied  { write } for  pid=6415 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 5958.043073][ T6443] KVM: debugfs: duplicate directory 6443-5
[ 6149.755378][   T24] audit: type=1400 audit(6148.930:213): avc:  denied  { write } for  pid=6537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6159.919647][   T24] audit: type=1400 audit(6159.080:214): avc:  denied  { write } for  pid=6547 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6452.766680][   T24] audit: type=1400 audit(6451.950:215): avc:  denied  { write } for  pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6462.777522][   T24] audit: type=1400 audit(6461.940:216): avc:  denied  { write } for  pid=6723 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6577.436726][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6577.786984][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6582.167558][ T6731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 6582.420354][ T6731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 6606.717773][ T6729] hsr_slave_0: entered promiscuous mode
[ 6606.818984][ T6729] hsr_slave_1: entered promiscuous mode
[ 6613.351401][ T6731] hsr_slave_0: entered promiscuous mode
[ 6613.429722][ T6731] hsr_slave_1: entered promiscuous mode
[ 6613.501484][ T6731] debugfs: 'hsr0' already exists in 'hsr'
[ 6613.555964][ T6731] Cannot create hsr debugfs directory
[ 6633.250731][ T6729] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 6633.829742][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6634.051283][ T6729] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 6634.639055][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6634.852254][ T6729] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 6635.422492][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6636.450144][ T6729] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 6636.879911][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6641.216531][ T6731] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 6641.729167][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 6641.899339][ T6731] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 6642.259878][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 6642.413154][ T6731] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 6642.746760][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 6642.849963][ T6731] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 6643.263017][ T6731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 6676.608950][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6683.780283][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0
[ 6691.337934][ T6125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6693.273763][ T6125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6695.346986][ T6125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6697.350816][ T6125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6716.352101][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6716.509035][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6716.619206][ T6125] bond0 (unregistering): Released all slaves
[ 6719.036799][ T6125] hsr_slave_0: left promiscuous mode
[ 6719.168395][ T6125] hsr_slave_1: left promiscuous mode
[ 6719.818860][ T6125] veth1_macvtap: left promiscuous mode
[ 6719.859429][ T6125] veth0_macvtap: left promiscuous mode
[ 6719.886348][ T6125] veth1_vlan: left promiscuous mode
[ 6719.906296][ T6125] veth0_vlan: left promiscuous mode
[ 6753.035171][ T6312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6754.641831][ T6312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6755.921978][ T6312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6757.701138][ T6312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 6764.548246][   T24] audit: type=1400 audit(6763.720:217): avc:  denied  { write } for  pid=6844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6773.840841][   T24] audit: type=1400 audit(6772.950:218): avc:  denied  { write } for  pid=6854 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6779.890033][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 6780.032168][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 6780.119385][ T6312] bond0 (unregistering): Released all slaves
[ 6780.682043][ T3205] 8021q: adding VLAN 0 to HW filter on device eth9
[ 6781.635066][ T6312] hsr_slave_0: left promiscuous mode
[ 6781.795889][ T6312] hsr_slave_1: left promiscuous mode
[ 6782.893120][ T6312] veth1_macvtap: left promiscuous mode
[ 6782.945774][ T6312] veth0_macvtap: left promiscuous mode
[ 6782.956942][ T6312] veth1_vlan: left promiscuous mode
[ 6782.958100][ T6312] veth0_vlan: left promiscuous mode
[ 6824.726250][   T24] audit: type=1400 audit(6823.890:219): avc:  denied  { write } for  pid=6871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6831.480078][   T24] audit: type=1400 audit(6830.670:220): avc:  denied  { write } for  pid=6881 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6836.080328][ T3205] 8021q: adding VLAN 0 to HW filter on device eth10
[ 6851.675767][   T24] audit: type=1400 audit(6850.840:221): avc:  denied  { write } for  pid=6896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6860.372694][   T24] audit: type=1400 audit(6859.530:222): avc:  denied  { write } for  pid=6907 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6866.399776][ T3205] 8021q: adding VLAN 0 to HW filter on device eth11
[ 6882.927279][   T24] audit: type=1400 audit(6882.000:223): avc:  denied  { write } for  pid=6921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6888.443448][ T6729] veth0_vlan: entered promiscuous mode
[ 6889.007077][ T6731] veth0_vlan: entered promiscuous mode
[ 6889.918780][   T24] audit: type=1400 audit(6889.110:224): avc:  denied  { write } for  pid=6930 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6890.090774][ T6729] veth1_vlan: entered promiscuous mode
[ 6890.627564][ T6731] veth1_vlan: entered promiscuous mode
[ 6895.091105][ T3205] 8021q: adding VLAN 0 to HW filter on device eth12
[ 6895.208088][ T6731] veth0_macvtap: entered promiscuous mode
[ 6895.438082][ T6729] veth0_macvtap: entered promiscuous mode
[ 6896.290460][ T6731] veth1_macvtap: entered promiscuous mode
[ 6896.483743][ T6729] veth1_macvtap: entered promiscuous mode
[ 6901.929941][ T4954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6901.966426][ T6713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6901.980048][ T6713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6901.987084][ T6713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6902.115526][ T6713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 6902.118662][ T6713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 6902.147548][ T6713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 6902.171030][ T6713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 6902.241881][   T24] audit: type=1400 audit(6901.430:225): avc:  denied  { write } for  pid=6932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6911.795248][   T24] audit: type=1400 audit(6910.980:226): avc:  denied  { write } for  pid=6936 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6943.578271][   T24] audit: type=1400 audit(6942.750:227): avc:  denied  { write } for  pid=6951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6954.558353][   T24] audit: type=1400 audit(6953.710:228): avc:  denied  { write } for  pid=6964 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 6961.011250][ T3205] 8021q: adding VLAN 0 to HW filter on device eth13
[ 6988.083818][   T24] audit: type=1400 audit(6987.160:229): avc:  denied  { write } for  pid=6980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7001.072123][   T24] audit: type=1400 audit(7000.260:230): avc:  denied  { write } for  pid=6990 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7010.169549][ T3205] 8021q: adding VLAN 0 to HW filter on device eth14
[ 7034.668046][   T24] audit: type=1400 audit(7033.850:231): avc:  denied  { write } for  pid=7002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7048.386881][   T24] audit: type=1400 audit(7047.510:232): avc:  denied  { write } for  pid=7013 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7057.401766][ T3205] 8021q: adding VLAN 0 to HW filter on device eth15
[ 7083.353665][   T24] audit: type=1400 audit(7082.540:233): avc:  denied  { write } for  pid=7032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7095.908302][   T24] audit: type=1400 audit(7095.060:234): avc:  denied  { write } for  pid=7042 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7104.977864][ T3205] 8021q: adding VLAN 0 to HW filter on device eth16
[ 7168.237089][   T24] audit: type=1400 audit(7167.420:235): avc:  denied  { write } for  pid=7075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7181.787651][   T24] audit: type=1400 audit(7180.950:236): avc:  denied  { write } for  pid=7085 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7216.755322][   T24] audit: type=1400 audit(7215.940:237): avc:  denied  { write } for  pid=7099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7230.430937][   T24] audit: type=1400 audit(7229.600:238): avc:  denied  { write } for  pid=7110 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7256.058411][   T24] audit: type=1400 audit(7255.220:239): avc:  denied  { write } for  pid=7122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7268.060472][   T24] audit: type=1400 audit(7267.140:240): avc:  denied  { write } for  pid=7131 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7304.583755][   T24] audit: type=1400 audit(7303.770:241): avc:  denied  { write } for  pid=7144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7316.037334][   T24] audit: type=1400 audit(7315.120:242): avc:  denied  { write } for  pid=7158 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7350.553537][   T24] audit: type=1400 audit(7349.740:243): avc:  denied  { write } for  pid=7174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7364.536854][   T24] audit: type=1400 audit(7363.690:244): avc:  denied  { write } for  pid=7185 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7407.688026][   T24] audit: type=1400 audit(7406.860:245): avc:  denied  { write } for  pid=7208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7421.505954][   T24] audit: type=1400 audit(7420.670:246): avc:  denied  { write } for  pid=7217 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7448.435739][   T24] audit: type=1400 audit(7447.620:247): avc:  denied  { write } for  pid=7230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7461.378894][   T24] audit: type=1400 audit(7460.430:248): avc:  denied  { write } for  pid=7240 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7484.540184][   T24] audit: type=1400 audit(7483.730:249): avc:  denied  { write } for  pid=7249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7496.795777][   T24] audit: type=1400 audit(7495.890:250): avc:  denied  { write } for  pid=7262 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7521.395702][   T24] audit: type=1400 audit(7520.560:251): avc:  denied  { write } for  pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7534.616875][   T24] audit: type=1400 audit(7533.760:252): avc:  denied  { write } for  pid=7283 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7908.118759][   T24] audit: type=1400 audit(7907.290:253): avc:  denied  { write } for  pid=7446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 7916.176294][   T24] audit: type=1400 audit(7915.330:254): avc:  denied  { write } for  pid=7450 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8026.728439][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8027.256709][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8044.447604][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 8044.859935][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 8050.101977][ T6827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8053.579873][ T6827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8055.292667][ T6827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8057.187027][ T6827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8076.353246][ T6827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8076.507687][ T6827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8076.619972][ T6827] bond0 (unregistering): Released all slaves
[ 8080.096593][ T6827] hsr_slave_0: left promiscuous mode
[ 8080.139007][ T6827] hsr_slave_1: left promiscuous mode
[ 8080.478780][ T6827] veth1_macvtap: left promiscuous mode
[ 8080.486018][ T6827] veth0_macvtap: left promiscuous mode
[ 8080.489620][ T6827] veth1_vlan: left promiscuous mode
[ 8080.507795][ T6827] veth0_vlan: left promiscuous mode
[ 8101.708377][ T7453] hsr_slave_0: entered promiscuous mode
[ 8101.819505][ T7453] hsr_slave_1: entered promiscuous mode
[ 8101.886587][ T7453] debugfs: 'hsr0' already exists in 'hsr'
[ 8101.887586][ T7453] Cannot create hsr debugfs directory
[ 8105.689825][ T4954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8107.661240][ T4954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8110.410335][ T4954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8112.261680][ T4954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 8116.687314][ T7460] hsr_slave_0: entered promiscuous mode
[ 8116.756175][ T7460] hsr_slave_1: entered promiscuous mode
[ 8116.836286][ T7460] debugfs: 'hsr0' already exists in 'hsr'
[ 8116.848365][ T7460] Cannot create hsr debugfs directory
[ 8117.442176][   T24] audit: type=1400 audit(8116.630:255): avc:  denied  { write } for  pid=7525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8126.427593][   T24] audit: type=1400 audit(8125.610:256): avc:  denied  { write } for  pid=7530 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8138.670605][ T4954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 8138.811362][ T4954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 8138.891244][ T4954] bond0 (unregistering): Released all slaves
[ 8139.340956][ T3205] 8021q: adding VLAN 0 to HW filter on device eth17
[ 8141.112490][ T4954] hsr_slave_0: left promiscuous mode
[ 8141.168863][ T4954] hsr_slave_1: left promiscuous mode
[ 8141.511277][ T4954] veth1_macvtap: left promiscuous mode
[ 8141.526292][ T4954] veth0_macvtap: left promiscuous mode
[ 8141.529971][ T4954] veth1_vlan: left promiscuous mode
[ 8141.577203][ T4954] veth0_vlan: left promiscuous mode
[ 8164.500405][ T7453] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 8165.073069][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 8165.382042][ T7453] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 8165.786756][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 8165.949921][ T7453] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 8166.550371][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 8166.768167][ T7453] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 8167.442799][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 8173.868656][ T7460] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 8174.400267][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 8174.562061][ T7460] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 8175.011783][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 8175.229318][ T7460] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 8175.712087][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 8175.956945][ T7460] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 8176.310004][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 8183.978066][   T24] audit: type=1400 audit(8183.150:257): avc:  denied  { write } for  pid=7544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8194.326884][   T24] audit: type=1400 audit(8193.460:258): avc:  denied  { write } for  pid=7561 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8200.991498][ T3205] 8021q: adding VLAN 0 to HW filter on device eth18
[ 8205.323453][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8209.846961][   T24] audit: type=1400 audit(8208.920:259): avc:  denied  { write } for  pid=7567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8211.486852][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 8219.345740][   T24] audit: type=1400 audit(8218.410:260): avc:  denied  { write } for  pid=7574 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8249.128593][   T24] audit: type=1400 audit(8248.290:261): avc:  denied  { write } for  pid=7586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8259.917434][   T24] audit: type=1400 audit(8259.090:262): avc:  denied  { write } for  pid=7596 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8266.928117][ T3205] 8021q: adding VLAN 0 to HW filter on device eth19
[ 8287.535863][   T24] audit: type=1400 audit(8286.710:263): avc:  denied  { write } for  pid=7612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8298.068135][   T24] audit: type=1400 audit(8297.250:264): avc:  denied  { write } for  pid=7623 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8305.432868][ T3205] 8021q: adding VLAN 0 to HW filter on device eth20
[ 8326.415807][   T24] audit: type=1400 audit(8325.570:265): avc:  denied  { write } for  pid=7638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8335.871443][   T24] audit: type=1400 audit(8334.960:266): avc:  denied  { write } for  pid=7648 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8342.266666][ T3205] 8021q: adding VLAN 0 to HW filter on device eth21
[ 8355.709843][ T7453] veth0_vlan: entered promiscuous mode
[ 8357.170226][ T7453] veth1_vlan: entered promiscuous mode
[ 8363.450277][ T7460] veth0_vlan: entered promiscuous mode
[ 8363.698377][ T7453] veth0_macvtap: entered promiscuous mode
[ 8365.211528][ T7453] veth1_macvtap: entered promiscuous mode
[ 8366.240120][ T7460] veth1_vlan: entered promiscuous mode
[ 8368.238579][   T24] audit: type=1400 audit(8367.430:267): avc:  denied  { write } for  pid=7663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8372.392880][ T7468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8372.398920][ T7468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8372.477464][ T6827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8372.623340][ T7301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8374.638420][ T7460] veth0_macvtap: entered promiscuous mode
[ 8376.405019][ T7460] veth1_macvtap: entered promiscuous mode
[ 8380.509250][   T24] audit: type=1400 audit(8379.670:268): avc:  denied  { write } for  pid=7666 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8383.678478][ T7508] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 8383.692889][ T7508] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 8383.709411][ T7508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 8383.849150][ T7468] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 8388.939706][ T3205] 8021q: adding VLAN 0 to HW filter on device eth22
[ 8418.157001][   T24] audit: type=1400 audit(8417.330:269): avc:  denied  { write } for  pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8433.539653][   T24] audit: type=1400 audit(8432.600:270): avc:  denied  { write } for  pid=7692 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8443.139420][ T3205] 8021q: adding VLAN 0 to HW filter on device eth23
[ 8487.002775][   T24] audit: type=1400 audit(8486.180:271): avc:  denied  { write } for  pid=7713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8502.529971][   T24] audit: type=1400 audit(8501.560:272): avc:  denied  { write } for  pid=7720 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8512.953581][ T3205] 8021q: adding VLAN 0 to HW filter on device eth24
[ 8581.867552][   T24] audit: type=1400 audit(8581.030:273): avc:  denied  { write } for  pid=7759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8596.652208][   T24] audit: type=1400 audit(8595.810:274): avc:  denied  { write } for  pid=7770 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8646.360605][   T24] audit: type=1400 audit(8645.530:275): avc:  denied  { write } for  pid=7791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8661.222523][   T24] audit: type=1400 audit(8660.390:276): avc:  denied  { write } for  pid=7802 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8692.607436][   T24] audit: type=1400 audit(8691.790:277): avc:  denied  { write } for  pid=7811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8706.617719][   T24] audit: type=1400 audit(8705.780:278): avc:  denied  { write } for  pid=7823 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8734.656914][   T24] audit: type=1400 audit(8733.780:279): avc:  denied  { write } for  pid=7831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8749.725125][   T24] audit: type=1400 audit(8748.800:280): avc:  denied  { write } for  pid=7842 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8784.708382][   T24] audit: type=1400 audit(8783.900:281): avc:  denied  { write } for  pid=7857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8800.187931][   T24] audit: type=1400 audit(8799.370:282): avc:  denied  { write } for  pid=7867 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8847.430677][   T24] audit: type=1400 audit(8846.580:283): avc:  denied  { write } for  pid=7884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8862.255946][   T24] audit: type=1400 audit(8861.410:284): avc:  denied  { write } for  pid=7896 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8918.908277][   T24] audit: type=1400 audit(8917.930:285): avc:  denied  { write } for  pid=7922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8933.963764][   T24] audit: type=1400 audit(8933.050:286): avc:  denied  { write } for  pid=7932 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8970.346554][   T24] audit: type=1400 audit(8969.520:287): avc:  denied  { write } for  pid=7948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 8985.959154][   T24] audit: type=1400 audit(8985.090:288): avc:  denied  { write } for  pid=7959 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9016.762395][   T24] audit: type=1400 audit(9015.950:289): avc:  denied  { write } for  pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9032.216945][   T24] audit: type=1400 audit(9031.390:290): avc:  denied  { write } for  pid=7980 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9151.918760][ T6312] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9155.082529][ T6312] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9157.601413][ T6312] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9161.419315][ T6312] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9182.638258][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 9183.060679][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 9183.660837][ T6312] bond0 (unregistering): Released all slaves
[ 9185.826850][ T6312] hsr_slave_0: left promiscuous mode
[ 9185.990379][ T6312] hsr_slave_1: left promiscuous mode
[ 9186.757054][ T6312] veth1_macvtap: left promiscuous mode
[ 9186.775696][ T6312] veth0_macvtap: left promiscuous mode
[ 9186.800143][ T6312] veth1_vlan: left promiscuous mode
[ 9186.822091][ T6312] veth0_vlan: left promiscuous mode
[ 9225.533149][ T6312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9227.523157][ T6312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9229.378970][ T6312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9230.592226][ T6312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 9241.080302][   T24] audit: type=1400 audit(9240.270:291): avc:  denied  { write } for  pid=8033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9248.756225][   T24] audit: type=1400 audit(9247.910:292): avc:  denied  { write } for  pid=8040 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9258.826585][ T6312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 9259.093803][ T6312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 9259.318781][ T6312] bond0 (unregistering): Released all slaves
[ 9261.631703][ T3205] 8021q: adding VLAN 0 to HW filter on device eth25
[ 9262.121369][ T6312] hsr_slave_0: left promiscuous mode
[ 9262.235505][ T6312] hsr_slave_1: left promiscuous mode
[ 9262.892278][ T6312] veth1_macvtap: left promiscuous mode
[ 9262.945433][ T6312] veth0_macvtap: left promiscuous mode
[ 9262.949168][ T6312] veth1_vlan: left promiscuous mode
[ 9262.986539][ T6312] veth0_vlan: left promiscuous mode
[ 9296.261049][   T24] audit: type=1400 audit(9295.410:293): avc:  denied  { write } for  pid=8043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9303.502562][   T24] audit: type=1400 audit(9302.660:294): avc:  denied  { write } for  pid=8054 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9332.890466][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9334.451314][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9334.946038][   T24] audit: type=1400 audit(9334.130:295): avc:  denied  { write } for  pid=8075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9336.651156][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 9337.109961][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 9342.557064][   T24] audit: type=1400 audit(9341.730:296): avc:  denied  { write } for  pid=8080 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9348.072082][ T3205] 8021q: adding VLAN 0 to HW filter on device eth26
[ 9368.366833][   T24] audit: type=1400 audit(9367.550:297): avc:  denied  { write } for  pid=8098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9368.843014][ T8011] hsr_slave_0: entered promiscuous mode
[ 9368.962323][ T8011] hsr_slave_1: entered promiscuous mode
[ 9374.142463][ T8008] hsr_slave_0: entered promiscuous mode
[ 9374.271340][ T8008] hsr_slave_1: entered promiscuous mode
[ 9374.376031][ T8008] debugfs: 'hsr0' already exists in 'hsr'
[ 9374.383540][ T8008] Cannot create hsr debugfs directory
[ 9376.865451][   T24] audit: type=1400 audit(9376.050:298): avc:  denied  { write } for  pid=8103 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9383.719665][ T3205] 8021q: adding VLAN 0 to HW filter on device eth27
[ 9398.322627][ T8011] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 9399.220484][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 9399.382034][ T8011] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 9399.779980][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 9399.991887][ T8011] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 9400.636107][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 9400.992994][ T8011] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 9401.553617][ T8011] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 9408.737025][ T8008] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 9409.163847][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 9409.348021][ T8008] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 9409.693798][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 9409.939975][ T8008] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 9410.552202][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 9410.788261][ T8008] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 9411.248247][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 9412.285735][   T24] audit: type=1400 audit(9411.430:299): avc:  denied  { write } for  pid=8111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9423.077542][   T24] audit: type=1400 audit(9422.200:300): avc:  denied  { write } for  pid=8132 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9429.978964][ T3205] 8021q: adding VLAN 0 to HW filter on device eth28
[ 9445.740473][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9453.192117][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0
[ 9463.128559][   T24] audit: type=1400 audit(9462.290:301): avc:  denied  { write } for  pid=8146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9475.008780][   T24] audit: type=1400 audit(9474.140:302): avc:  denied  { write } for  pid=8157 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9482.626356][ T3205] 8021q: adding VLAN 0 to HW filter on device eth29
[ 9514.576130][   T24] audit: type=1400 audit(9513.740:303): avc:  denied  { write } for  pid=8169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9527.606648][   T24] audit: type=1400 audit(9526.780:304): avc:  denied  { write } for  pid=8178 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9535.931448][ T3205] 8021q: adding VLAN 0 to HW filter on device eth30
[ 9567.580195][   T24] audit: type=1400 audit(9566.770:305): avc:  denied  { write } for  pid=8196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9580.417817][   T24] audit: type=1400 audit(9579.550:306): avc:  denied  { write } for  pid=8207 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9589.132599][ T3205] 8021q: adding VLAN 0 to HW filter on device eth31
[ 9616.206460][   T24] audit: type=1400 audit(9615.370:307): avc:  denied  { write } for  pid=8223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9629.120219][   T24] audit: type=1400 audit(9628.290:308): avc:  denied  { write } for  pid=8234 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9636.269844][ T8011] veth0_vlan: entered promiscuous mode
[ 9637.982373][ T8011] veth1_vlan: entered promiscuous mode
[ 9638.819854][ T3205] 8021q: adding VLAN 0 to HW filter on device eth32
[ 9644.380856][ T8008] veth0_vlan: entered promiscuous mode
[ 9647.477957][ T8011] veth0_macvtap: entered promiscuous mode
[ 9647.770203][ T8008] veth1_vlan: entered promiscuous mode
[ 9648.897641][ T8011] veth1_macvtap: entered promiscuous mode
[ 9656.880722][ T8008] veth0_macvtap: entered promiscuous mode
[ 9657.530557][ T7301] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 9657.532029][ T7301] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 9657.533660][ T7301] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 9657.556072][ T7301] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 9658.349678][ T8008] veth1_macvtap: entered promiscuous mode
[ 9667.028336][ T6751] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 9667.032454][ T6751] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 9667.162503][ T7301] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 9667.163678][ T7301] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 9667.695492][   T24] audit: type=1400 audit(9666.710:309): avc:  denied  { write } for  pid=8242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9683.715621][   T24] audit: type=1400 audit(9682.810:310): avc:  denied  { write } for  pid=8246 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9776.859322][   T24] audit: type=1400 audit(9776.030:311): avc:  denied  { write } for  pid=8282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9792.993642][   T24] audit: type=1400 audit(9792.170:312): avc:  denied  { write } for  pid=8294 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9841.187638][   T24] audit: type=1400 audit(9840.340:313): avc:  denied  { write } for  pid=8310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9857.840284][   T24] audit: type=1400 audit(9856.860:314): avc:  denied  { write } for  pid=8320 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9899.845758][   T24] audit: type=1400 audit(9899.010:315): avc:  denied  { write } for  pid=8333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9918.017685][   T24] audit: type=1400 audit(9917.140:316): avc:  denied  { write } for  pid=8347 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9954.216661][   T24] audit: type=1400 audit(9953.360:317): avc:  denied  { write } for  pid=8358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 9971.317711][   T24] audit: type=1400 audit(9970.500:318): avc:  denied  { write } for  pid=8370 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10048.752490][   T24] audit: type=1400 audit(10047.910:319): avc:  denied  { write } for  pid=8405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10066.606009][   T24] audit: type=1400 audit(10065.750:320): avc:  denied  { write } for  pid=8416 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10106.186616][   T24] audit: type=1400 audit(10105.330:321): avc:  denied  { write } for  pid=8427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10124.336344][   T24] audit: type=1400 audit(10123.390:322): avc:  denied  { write } for  pid=8438 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10181.340610][   T24] audit: type=1400 audit(10180.490:323): avc:  denied  { write } for  pid=8453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10199.057109][   T24] audit: type=1400 audit(10198.220:324): avc:  denied  { write } for  pid=8463 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10255.872276][   T24] audit: type=1400 audit(10255.040:325): avc:  denied  { write } for  pid=8484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10269.872947][   T24] audit: type=1400 audit(10269.000:326): avc:  denied  { write } for  pid=8488 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10303.426084][   T24] audit: type=1400 audit(10302.580:327): avc:  denied  { write } for  pid=8493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10319.865249][   T24] audit: type=1400 audit(10319.030:328): avc:  denied  { write } for  pid=8503 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10357.458731][   T24] audit: type=1400 audit(10356.600:329): avc:  denied  { write } for  pid=8517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10371.206232][   T24] audit: type=1400 audit(10370.330:330): avc:  denied  { write } for  pid=8521 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10451.196213][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[10453.097149][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[10454.698203][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[10456.943419][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[10511.809426][ T8494] hsr_slave_0: entered promiscuous mode
[10511.999430][ T8494] hsr_slave_1: entered promiscuous mode
[10512.100886][ T8494] debugfs: 'hsr0' already exists in 'hsr'
[10512.127484][ T8494] Cannot create hsr debugfs directory
[10518.091754][ T8497] hsr_slave_0: entered promiscuous mode
[10518.259414][ T8497] hsr_slave_1: entered promiscuous mode
[10518.323164][ T8497] debugfs: 'hsr0' already exists in 'hsr'
[10518.425792][ T8497] Cannot create hsr debugfs directory
[10563.601181][   T24] audit: type=1400 audit(10562.790:331): avc:  denied  { write } for  pid=8568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10577.352310][ T8494] netdevsim netdevsim1 netdevsim0: renamed from eth0
[10577.525655][   T24] audit: type=1400 audit(10576.710:332): avc:  denied  { write } for  pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10578.047981][ T8494] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[10581.669980][ T8494] netdevsim netdevsim1 netdevsim1: renamed from eth1
[10582.363149][ T8494] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[10582.863735][ T8494] netdevsim netdevsim1 netdevsim2: renamed from eth2
[10583.697562][ T8494] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[10583.793080][ T8494] netdevsim netdevsim1 netdevsim3: renamed from eth3
[10584.470355][ T8494] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[10610.637404][ T8497] netdevsim netdevsim0 netdevsim0: renamed from eth0
[10611.310044][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[10611.560249][ T8497] netdevsim netdevsim0 netdevsim1: renamed from eth1
[10612.439496][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[10612.691650][ T8497] netdevsim netdevsim0 netdevsim2: renamed from eth2
[10613.330783][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[10613.648961][ T8497] netdevsim netdevsim0 netdevsim3: renamed from eth3
[10614.408780][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[10614.637334][   T24] audit: type=1400 audit(10613.810:333): avc:  denied  { write } for  pid=8583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10631.692892][   T24] audit: type=1400 audit(10630.760:334): avc:  denied  { write } for  pid=8598 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10651.922748][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0
[10660.166204][   T24] audit: type=1400 audit(10659.350:335): avc:  denied  { write } for  pid=8605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10670.958850][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0
[10677.788076][   T24] audit: type=1400 audit(10676.960:336): avc:  denied  { write } for  pid=8613 comm="rm" name="hook-state" dev="tmpfs" ino=122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[10678.437803][   T26] INFO: task syz.8.1117:8476 blocked for more than 430 seconds.
[10678.488932][   T26]       Not tainted syzkaller #0
[10678.491182][   T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[10678.491759][   T26] task:syz.8.1117      state:D stack:0     pid:8476  tgid:8476  ppid:8008   task_flags:0x400040 flags:0x00000011
[10678.492901][   T26] Call trace:
[10678.493282][   T26]  __switch_to+0x5e0/0xb70 (T)
[10678.493838][   T26]  __schedule+0x2554/0x3828
[10678.495858][   T26]  schedule+0xac/0x278
[10678.496344][   T26]  schedule_timeout+0x68/0x1ec
[10678.496797][   T26]  do_wait_for_common+0x270/0x428
[10678.497239][   T26]  wait_for_completion+0x44/0x5c
[10678.497655][   T26]  __synchronize_srcu+0x1b4/0x1f4
[10678.498180][   T26]  synchronize_srcu+0x668/0x8dc
[10678.498705][   T26]  mmu_notifier_unregister+0x320/0x428
[10678.499199][   T26]  kvm_put_kvm+0x69c/0xbbc
[10678.499658][   T26]  kvm_vm_release+0x58/0x78
[10678.500138][   T26]  __fput+0x4ac/0x978
[10678.500596][   T26]  ____fput+0x20/0x30
[10678.501010][   T26]  task_work_run+0x1b8/0x250
[10678.501480][   T26]  exit_to_user_mode_loop+0x110/0x188
[10678.501943][   T26]  el0_svc+0x184/0x238
[10678.502404][   T26]  el0t_64_sync_handler+0x84/0x12c
[10678.502852][   T26]  el0t_64_sync+0x198/0x19c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[10678.747637][   T26] 
[10678.747637][   T26] Showing all locks held in the system:
[10678.748495][   T26] 1 lock held by khungtaskd/26:
[10678.748941][   T26]  #0: ffff800087db4518 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44
[10678.751595][   T26] 2 locks held by getty/3234:
[10678.751978][   T26]  #0: 3df00000127a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[10678.753724][   T26]  #1: 0fff80008cb4b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x314/0x1214
[10678.972547][   T26] 2 locks held by syz-executor/3362:
[10679.066513][   T26] 3 locks held by kworker/u4:8/3465:
[10679.078067][   T26] 3 locks held by kworker/u4:5/6312:
[10679.078553][   T26] 3 locks held by kworker/u4:11/6827:
[10679.078888][   T26] 3 locks held by kworker/u4:1/7301:
[10679.079270][   T26] 2 locks held by kworker/u4:14/8140:
[10679.079611][   T26]  #0: 82f000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c
[10679.081614][   T26]  #1: ffff80008f357cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c
[10679.083185][   T26] 3 locks held by kworker/u4:15/8141:
[10679.083550][   T26] 3 locks held by kworker/u4:0/8385:
[10679.083873][   T26] 2 locks held by syz.9.1116/8472:
[10679.207653][   T26] 2 locks held by kworker/u4:2/8514:
[10679.208087][   T26]  #0: 82f000000d036540 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x804/0x1d5c
[10679.210020][   T26]  #1: ffff80008f9e7cb8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x890/0x1d5c
[10679.212346][   T26] 3 locks held by kworker/u4:10/8546:
[10679.212693][   T26] 2 locks held by modprobe/8614:
[10679.212983][   T26] 3 locks held by kworker/u4:16/8615:
[10679.213295][   T26] 1 lock held by modprobe/8616:
[10679.365780][   T26] 
[10679.367414][   T26] =============================================
[10679.367414][   T26] 
[10679.368480][   T26] Kernel panic - not syncing: hung_task: blocked tasks
[10679.373070][   T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
[10679.374479][   T26] Hardware name: linux,dummy-virt (DT)
[10679.375370][   T26] Call trace:
[10679.376088][   T26]  show_stack+0x2c/0x3c (C)
[10679.377132][   T26]  __dump_stack+0x30/0x40
[10679.378179][   T26]  dump_stack_lvl+0x30/0x12c
[10679.379123][   T26]  dump_stack+0x1c/0x28
[10679.380092][   T26]  vpanic+0x4cc/0x844
[10679.380960][   T26]  vpanic+0x0/0x844
[10679.381809][   T26]  hung_task_panic+0x0/0x2c
[10679.382851][   T26]  kthread+0x4d4/0x51c
[10679.383802][   T26]  ret_from_fork+0x10/0x20
[10679.385650][   T26] Kernel Offset: disabled
[10679.386426][   T26] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f
[10679.387422][   T26] Memory Limit: none
[10679.389657][   T26] Rebooting in 86400 seconds..